# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 30.09.2020 16:07:36.973 Process: id = "1" image_name = "x22p4fou0h3du8or.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe" page_root = "0x41f79000" os_pid = "0xb88" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x454" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa84 [0048.725] GetTickCount () returned 0x114758e [0048.751] GetCurrentThreadId () returned 0xa84 [0048.753] GetCurrentProcess () returned 0xffffffff [0048.753] GetUserObjectInformationW (in: hObj=0x4c, nIndex=1, pvInfo=0x18fec0, nLength=0xc, lpnLengthNeeded=0x0 | out: pvInfo=0x18fec0, lpnLengthNeeded=0x0) returned 1 [0048.909] GetCurrentProcess () returned 0xffffffff [0048.930] GetCurrentProcess () returned 0xffffffff [0048.930] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x18fe10, ProcessInformationLength=0x4, ReturnLength=0x18fe08 | out: ProcessInformation=0x18fe10, ReturnLength=0x18fe08) returned 0x0 [0048.930] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x18fe04, ProcessInformationLength=0x4, ReturnLength=0x18fe08 | out: ProcessInformation=0x18fe04, ReturnLength=0x18fe08) returned 0xc0000353 [0048.930] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1f, ProcessInformation=0x18fdfc, ProcessInformationLength=0x4, ReturnLength=0x18fe08 | out: ProcessInformation=0x18fdfc, ReturnLength=0x18fe08) returned 0x0 [0048.931] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x18fdf8, Length=0x2, ResultLength=0x18fe08 | out: SystemInformation=0x18fdf8, ResultLength=0x18fe08*=0x2) returned 0x0 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetTickCount () returned 0x1147659 [0048.931] GetCurrentThread () returned 0xfffffffe [0048.931] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0048.950] NtdllDefWindowProc_W () returned 0x0 [0048.950] NtdllDefWindowProc_W () returned 0x1 [0048.954] NtdllDefWindowProc_W () returned 0x0 [0049.181] NtdllDefWindowProc_W () returned 0x0 [0049.181] DestroyWindow (hWnd=0x5011c) returned 1 [0049.181] NtdllDefWindowProc_W () returned 0x0 [0049.182] NtdllDefWindowProc_W () returned 0x0 [0049.183] NtdllDefWindowProc_W () returned 0x0 [0049.247] GetCurrentProcess () returned 0xffffffff [0049.368] GetTickCount () returned 0x1147743 [0049.371] IsDebuggerPresent () returned 0 [0049.381] GetCurrentProcessId () returned 0xb88 [0049.469] GetTickCount () returned 0x11477a0 [0049.470] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\" " [0049.470] GetCurrentProcessId () returned 0xb88 [0049.470] GetCurrentProcess () returned 0xffffffff [0051.167] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x258) returned 0x2220840 [0051.167] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x3c) returned 0x2220aa0 [0051.167] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x1000) returned 0x2220ae8 [0051.167] InitOnceExecuteOnce (in: InitOnce=0x413a08, InitFn=0x40eb82, Parameter=0x40e6a0, Context=0x18fef0 | out: InitOnce=0x413a08, Parameter=0x40e6a0, Context=0x18fef0*=0x4) returned 1 [0051.168] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x10) returned 0x2221b50 [0051.168] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221b68 [0051.168] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x40) returned 0x2221b90 [0051.168] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221c30 [0051.168] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x40) returned 0x2221c58 [0051.178] GetVersionExA (in: lpVersionInformation=0x18fef0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x2221c30, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x10000, szCSDVersion="ÿïý\x7f") | out: lpVersionInformation=0x18fef0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.178] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x754e0000 [0051.178] GetProcAddress (hModule=0x754e0000, lpProcName="DllGetVersion") returned 0x75525a6f [0051.180] DllGetVersion () returned 0x0 [0051.180] LoadLibraryA (lpLibFileName="uxtheme.dll") returned 0x750f0000 [0051.180] GetProcAddress (hModule=0x750f0000, lpProcName="IsAppThemed") returned 0x75117009 [0051.180] IsAppThemed () returned 0x1 [0051.181] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221ca0 [0051.181] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x40) returned 0x2221cc8 [0051.183] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221d98 [0051.183] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0xc8) returned 0x2221dc0 [0051.186] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221f18 [0051.186] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x40) returned 0x2221f40 [0051.186] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x20) returned 0x2221fa0 [0051.186] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x10) returned 0x2221fc8 [0051.189] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x34) returned 0x2221fe0 [0051.189] InitOnceExecuteOnce (in: InitOnce=0x413a08, InitFn=0x40eb82, Parameter=0x40e6a0, Context=0x18ff30 | out: InitOnce=0x413a08, Parameter=0x40e6a0, Context=0x18ff30*=0x4) returned 1 [0051.190] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x3c) returned 0x2224048 [0051.190] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0x800) returned 0x2224090 [0051.190] InitOnceExecuteOnce (in: InitOnce=0x413a08, InitFn=0x40eb82, Parameter=0x40e6a0, Context=0x18ff28 | out: InitOnce=0x413a08, Parameter=0x40e6a0, Context=0x18ff28*=0x4) returned 1 [0051.190] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x8, Size=0xc) returned 0x22248f8 [0051.190] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x34) returned 0x2224910 [0051.191] InitOnceExecuteOnce (in: InitOnce=0x413a08, InitFn=0x40eb82, Parameter=0x40e6a0, Context=0x18ff30 | out: InitOnce=0x413a08, Parameter=0x40e6a0, Context=0x18ff30*=0x4) returned 1 [0051.193] GetVersionExA (in: lpVersionInformation=0x18fef0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x2404f08, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x25e07d4, szCSDVersion="\\K\x1eÿµ\x830") | out: lpVersionInformation=0x18fef0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.193] GetVersionExA (in: lpVersionInformation=0x18fe54*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x25e07d0, dwMinorVersion=0x4, dwBuildNumber=0x7f, dwPlatformId=0x83e, szCSDVersion="\x82\x02") | out: lpVersionInformation=0x18fe54*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.195] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x24007f8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe")) returned 0x3a [0051.198] GetLongPathNameA (in: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\", lpszLongPath=0x24007f8, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\") returned 0x31 [0051.202] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp")) returned 1 [0051.205] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x24007f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0051.213] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.tmp")) returned 1 [0051.214] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0051.219] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0x24007f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0051.220] CreateFileA (lpFileName="PsExec.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psexec.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0051.236] RtlAllocateHeap (HeapHandle=0x2220000, Flags=0x0, Size=0x158) returned 0x2222020 [0051.250] CreateFileA (lpFileName="hyBrDFjOidLuty.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0051.269] CreateFileA (lpFileName="", dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0051.269] CreateFileA (lpFileName="", dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x5, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0051.270] GetLongPathNameA (in: lpszShortPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\", lpszLongPath=0x24007f8, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\") returned 0x31 [0051.271] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x24007f8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe")) returned 0x3a [0051.272] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x24007f8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe")) returned 0x3a [0051.272] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x24007f8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe")) returned 0x3a [0051.272] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x24007f8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\x22p4fou0h3du8or.exe")) returned 0x3a [0051.273] GetVersionExA (in: lpVersionInformation=0x18feb4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x76d51182, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x77c620ac, szCSDVersion="\x18ÿ\x18") | out: lpVersionInformation=0x18feb4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.273] GetVersionExA (in: lpVersionInformation=0x18fe18*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x77c7387a, dwMinorVersion=0x77cd139c, dwBuildNumber=0x0, dwPlatformId=0x2400000, szCSDVersion="\x98Y@\x02Äý\x18") | out: lpVersionInformation=0x18fe18*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.273] GetWindowsDirectoryA (in: lpBuffer=0x2405ab0, uSize=0x800 | out: lpBuffer="C:\\Windows") returned 0xa Thread: id = 2 os_tid = 0xa74 Thread: id = 3 os_tid = 0xa70 Thread: id = 4 os_tid = 0xb3c Thread: id = 5 os_tid = 0xb34 Thread: id = 8 os_tid = 0xa80 [0061.576] GetTickCount () returned 0x1147e83 [0062.179] GetCurrentProcess () returned 0xffffffff [0062.179] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0062.180] IsDebuggerPresent () returned 0 [0064.058] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0064.058] IsDebuggerPresent () returned 0 [0064.069] GetTickCount () returned 0x1148122 [0067.282] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0067.294] IsDebuggerPresent () returned 0 [0068.165] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0068.165] IsDebuggerPresent () returned 0 [0068.733] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0068.733] IsDebuggerPresent () returned 0 [0069.632] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0069.632] IsDebuggerPresent () returned 0 [0070.144] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0070.144] IsDebuggerPresent () returned 0 [0070.696] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0070.697] IsDebuggerPresent () returned 0 [0071.281] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0071.281] IsDebuggerPresent () returned 0 [0071.830] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0071.830] IsDebuggerPresent () returned 0 [0072.381] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0072.381] IsDebuggerPresent () returned 0 [0072.916] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0072.916] IsDebuggerPresent () returned 0 [0073.496] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0073.496] IsDebuggerPresent () returned 0 [0074.011] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0074.011] IsDebuggerPresent () returned 0 [0074.542] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0074.542] IsDebuggerPresent () returned 0 [0075.055] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0075.055] IsDebuggerPresent () returned 0 [0075.581] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0075.581] IsDebuggerPresent () returned 0 [0076.138] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0076.138] IsDebuggerPresent () returned 0 [0076.673] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0076.673] IsDebuggerPresent () returned 0 [0081.353] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0081.355] IsDebuggerPresent () returned 0 [0081.972] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0081.972] IsDebuggerPresent () returned 0 [0082.498] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0082.498] IsDebuggerPresent () returned 0 [0083.011] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0083.011] IsDebuggerPresent () returned 0 [0084.343] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0084.343] IsDebuggerPresent () returned 0 [0112.507] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0112.508] IsDebuggerPresent () returned 0 [0132.723] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0132.723] IsDebuggerPresent () returned 0 [0133.268] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0133.268] IsDebuggerPresent () returned 0 [0133.818] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0133.818] IsDebuggerPresent () returned 0 [0134.320] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0134.320] IsDebuggerPresent () returned 0 [0134.867] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0134.867] IsDebuggerPresent () returned 0 [0135.380] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0135.380] IsDebuggerPresent () returned 0 [0135.916] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0135.916] IsDebuggerPresent () returned 0 [0136.431] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0136.431] IsDebuggerPresent () returned 0 [0142.857] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0142.857] IsDebuggerPresent () returned 0 [0148.317] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0148.317] IsDebuggerPresent () returned 0 [0149.258] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0149.258] IsDebuggerPresent () returned 0 [0155.100] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0155.100] IsDebuggerPresent () returned 0 [0155.611] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0155.611] IsDebuggerPresent () returned 0 [0156.156] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0156.157] IsDebuggerPresent () returned 0 [0156.707] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0156.707] IsDebuggerPresent () returned 0 [0157.240] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0157.240] IsDebuggerPresent () returned 0 [0157.768] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0157.768] IsDebuggerPresent () returned 0 [0158.311] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0158.311] IsDebuggerPresent () returned 0 [0158.841] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0158.841] IsDebuggerPresent () returned 0 [0159.558] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0159.558] IsDebuggerPresent () returned 0 [0160.096] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0160.096] IsDebuggerPresent () returned 0 [0160.633] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0160.634] IsDebuggerPresent () returned 0 [0161.180] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0161.180] IsDebuggerPresent () returned 0 [0161.719] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0161.719] IsDebuggerPresent () returned 0 [0162.257] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0162.257] IsDebuggerPresent () returned 0 [0162.779] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0162.779] IsDebuggerPresent () returned 0 [0163.331] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0163.331] IsDebuggerPresent () returned 0 [0163.850] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0163.850] IsDebuggerPresent () returned 0 [0164.369] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0164.369] IsDebuggerPresent () returned 0 [0164.878] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0164.878] IsDebuggerPresent () returned 0 [0165.400] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0165.400] IsDebuggerPresent () returned 0 [0165.916] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0165.916] IsDebuggerPresent () returned 0 [0166.448] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0166.448] IsDebuggerPresent () returned 0 [0166.972] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0166.972] IsDebuggerPresent () returned 0 [0167.500] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0167.500] IsDebuggerPresent () returned 0 [0168.016] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0168.016] IsDebuggerPresent () returned 0 [0168.590] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0168.590] IsDebuggerPresent () returned 0 [0169.119] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0169.119] IsDebuggerPresent () returned 0 [0171.904] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0171.904] IsDebuggerPresent () returned 0 [0172.510] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0172.511] IsDebuggerPresent () returned 0 [0173.222] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0173.222] IsDebuggerPresent () returned 0 [0173.850] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0179.766] IsDebuggerPresent () returned 0 [0180.801] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0180.801] IsDebuggerPresent () returned 0 [0181.337] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0181.337] IsDebuggerPresent () returned 0 [0181.850] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0181.850] IsDebuggerPresent () returned 0 [0182.386] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0182.386] IsDebuggerPresent () returned 0 [0182.915] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0182.915] IsDebuggerPresent () returned 0 [0183.446] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0183.446] IsDebuggerPresent () returned 0 [0183.995] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0183.995] IsDebuggerPresent () returned 0 [0184.532] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0184.532] IsDebuggerPresent () returned 0 [0185.095] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0185.095] IsDebuggerPresent () returned 0 [0185.609] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0185.609] IsDebuggerPresent () returned 0 [0186.144] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0186.144] IsDebuggerPresent () returned 0 [0186.668] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0186.668] IsDebuggerPresent () returned 0 [0187.220] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0187.220] IsDebuggerPresent () returned 0 [0187.753] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0187.753] IsDebuggerPresent () returned 0 [0188.390] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0188.390] IsDebuggerPresent () returned 0 [0188.915] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0188.915] IsDebuggerPresent () returned 0 [0189.441] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0189.442] IsDebuggerPresent () returned 0 [0189.981] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0189.981] IsDebuggerPresent () returned 0 [0190.528] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0190.528] IsDebuggerPresent () returned 0 [0191.074] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0191.074] IsDebuggerPresent () returned 0 [0191.596] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0191.596] IsDebuggerPresent () returned 0 [0192.131] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0192.131] IsDebuggerPresent () returned 0 [0192.704] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0192.704] IsDebuggerPresent () returned 0 [0193.449] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0193.449] IsDebuggerPresent () returned 0 [0193.986] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0193.986] IsDebuggerPresent () returned 0 [0194.513] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0194.513] IsDebuggerPresent () returned 0 [0195.053] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0195.053] IsDebuggerPresent () returned 0 [0195.619] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0195.619] IsDebuggerPresent () returned 0 [0196.156] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0196.156] IsDebuggerPresent () returned 0 [0196.677] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0196.677] IsDebuggerPresent () returned 0 [0197.221] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0197.221] IsDebuggerPresent () returned 0 [0197.753] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0197.753] IsDebuggerPresent () returned 0 [0198.318] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0198.318] IsDebuggerPresent () returned 0 [0198.861] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0198.861] IsDebuggerPresent () returned 0 [0199.397] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0199.397] IsDebuggerPresent () returned 0 [0199.914] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0199.914] IsDebuggerPresent () returned 0 [0200.435] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0200.435] IsDebuggerPresent () returned 0 [0200.950] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0200.950] IsDebuggerPresent () returned 0 [0201.615] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0201.615] IsDebuggerPresent () returned 0 [0202.359] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0202.359] IsDebuggerPresent () returned 0 [0202.902] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0202.902] IsDebuggerPresent () returned 0 [0203.440] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0203.440] IsDebuggerPresent () returned 0 [0203.974] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0203.974] IsDebuggerPresent () returned 0 [0204.529] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0204.529] IsDebuggerPresent () returned 0 [0205.054] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0205.054] IsDebuggerPresent () returned 0 [0205.598] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0205.598] IsDebuggerPresent () returned 0 [0206.136] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0206.136] IsDebuggerPresent () returned 0 [0206.670] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0206.670] IsDebuggerPresent () returned 0 [0207.327] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0207.327] IsDebuggerPresent () returned 0 [0207.888] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0207.888] IsDebuggerPresent () returned 0 [0208.441] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0208.441] IsDebuggerPresent () returned 0 [0208.976] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0208.976] IsDebuggerPresent () returned 0 [0209.506] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0209.506] IsDebuggerPresent () returned 0 [0210.010] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0210.010] IsDebuggerPresent () returned 0 [0210.622] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0210.622] IsDebuggerPresent () returned 0 [0211.272] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0211.273] IsDebuggerPresent () returned 0 [0211.847] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0211.847] IsDebuggerPresent () returned 0 [0212.369] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0212.369] IsDebuggerPresent () returned 0 [0212.883] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0212.883] IsDebuggerPresent () returned 0 [0213.442] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0213.442] IsDebuggerPresent () returned 0 [0214.079] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0214.079] IsDebuggerPresent () returned 0 [0214.606] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0214.606] IsDebuggerPresent () returned 0 [0215.182] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0215.182] IsDebuggerPresent () returned 0 [0215.694] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0215.694] IsDebuggerPresent () returned 0 [0216.927] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0216.928] IsDebuggerPresent () returned 0 [0217.494] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0217.494] IsDebuggerPresent () returned 0 [0218.025] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0218.025] IsDebuggerPresent () returned 0 [0218.559] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0218.559] IsDebuggerPresent () returned 0 [0219.240] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0219.240] IsDebuggerPresent () returned 0 [0219.765] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0219.765] IsDebuggerPresent () returned 0 [0220.287] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0220.287] IsDebuggerPresent () returned 0 [0220.803] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0220.803] IsDebuggerPresent () returned 0 [0221.330] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0221.330] IsDebuggerPresent () returned 0 [0221.846] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0221.847] IsDebuggerPresent () returned 0 [0222.373] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0222.373] IsDebuggerPresent () returned 0 [0222.896] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0222.896] IsDebuggerPresent () returned 0 [0224.836] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0224.836] IsDebuggerPresent () returned 0 [0225.363] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0225.363] IsDebuggerPresent () returned 0 [0225.885] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0225.885] IsDebuggerPresent () returned 0 [0226.479] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0226.479] IsDebuggerPresent () returned 0 [0226.992] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0226.992] IsDebuggerPresent () returned 0 [0227.582] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0227.587] IsDebuggerPresent () returned 0 [0232.627] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0232.693] IsDebuggerPresent () returned 0 [0233.305] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0233.305] IsDebuggerPresent () returned 0 [0233.857] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0233.857] IsDebuggerPresent () returned 0 [0234.400] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0234.400] IsDebuggerPresent () returned 0 [0234.969] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0234.969] IsDebuggerPresent () returned 0 [0235.513] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0235.513] IsDebuggerPresent () returned 0 [0236.066] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0236.066] IsDebuggerPresent () returned 0 [0236.602] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0236.602] IsDebuggerPresent () returned 0 [0237.126] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0237.127] IsDebuggerPresent () returned 0 [0237.667] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0237.667] IsDebuggerPresent () returned 0 [0238.191] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0238.192] IsDebuggerPresent () returned 0 [0238.734] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0238.734] IsDebuggerPresent () returned 0 [0239.366] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0239.366] IsDebuggerPresent () returned 0 [0239.879] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0239.879] IsDebuggerPresent () returned 0 [0240.404] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0240.404] IsDebuggerPresent () returned 0 [0240.937] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0240.937] IsDebuggerPresent () returned 0 [0241.546] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0241.546] IsDebuggerPresent () returned 0 [0242.065] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0242.065] IsDebuggerPresent () returned 0 [0242.614] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0242.614] IsDebuggerPresent () returned 0 [0243.134] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0243.134] IsDebuggerPresent () returned 0 [0243.664] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0243.664] IsDebuggerPresent () returned 0 [0244.186] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0244.186] IsDebuggerPresent () returned 0 [0244.737] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0244.766] IsDebuggerPresent () returned 0 [0245.418] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0245.418] IsDebuggerPresent () returned 0 [0245.972] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0245.972] IsDebuggerPresent () returned 0 [0246.505] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0246.505] IsDebuggerPresent () returned 0 [0247.039] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0247.069] IsDebuggerPresent () returned 0 [0248.666] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0248.666] IsDebuggerPresent () returned 0 [0249.296] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0249.296] IsDebuggerPresent () returned 0 [0249.811] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0249.811] IsDebuggerPresent () returned 0 [0250.356] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0250.356] IsDebuggerPresent () returned 0 [0250.870] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0250.870] IsDebuggerPresent () returned 0 [0251.407] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0251.407] IsDebuggerPresent () returned 0 [0251.956] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0251.956] IsDebuggerPresent () returned 0 [0252.524] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0252.524] IsDebuggerPresent () returned 0 [0253.050] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0253.050] IsDebuggerPresent () returned 0 [0253.585] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0253.585] IsDebuggerPresent () returned 0 [0254.105] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0254.105] IsDebuggerPresent () returned 0 [0254.646] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0254.646] IsDebuggerPresent () returned 0 [0255.865] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0255.865] IsDebuggerPresent () returned 0 [0256.406] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0256.406] IsDebuggerPresent () returned 0 [0256.938] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0256.938] IsDebuggerPresent () returned 0 [0257.461] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0257.461] IsDebuggerPresent () returned 0 [0257.996] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0257.996] IsDebuggerPresent () returned 0 [0258.550] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0258.550] IsDebuggerPresent () returned 0 [0259.089] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0259.090] IsDebuggerPresent () returned 0 [0259.637] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0259.637] IsDebuggerPresent () returned 0 [0260.170] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0260.170] IsDebuggerPresent () returned 0 [0260.748] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0260.748] IsDebuggerPresent () returned 0 [0261.302] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0261.302] IsDebuggerPresent () returned 0 [0263.792] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0263.792] IsDebuggerPresent () returned 0 [0264.317] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0264.317] IsDebuggerPresent () returned 0 [0264.866] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0264.866] IsDebuggerPresent () returned 0 [0265.526] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0265.526] IsDebuggerPresent () returned 0 [0266.047] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0266.047] IsDebuggerPresent () returned 0 [0266.572] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0266.572] IsDebuggerPresent () returned 0 [0267.131] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0267.132] IsDebuggerPresent () returned 0 [0267.697] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0267.697] IsDebuggerPresent () returned 0 [0268.218] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0268.218] IsDebuggerPresent () returned 0 [0268.755] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0268.755] IsDebuggerPresent () returned 0 [0269.350] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0269.350] IsDebuggerPresent () returned 0 [0269.897] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0269.897] IsDebuggerPresent () returned 0 [0270.423] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0270.423] IsDebuggerPresent () returned 0 [0270.937] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0270.937] IsDebuggerPresent () returned 0 [0271.466] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0271.466] IsDebuggerPresent () returned 0 [0271.990] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0271.991] IsDebuggerPresent () returned 0 [0272.557] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0272.557] IsDebuggerPresent () returned 0 [0273.270] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0273.271] IsDebuggerPresent () returned 0 [0273.789] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0273.789] IsDebuggerPresent () returned 0 [0274.316] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0274.316] IsDebuggerPresent () returned 0 [0274.831] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0274.831] IsDebuggerPresent () returned 0 [0275.360] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0275.360] IsDebuggerPresent () returned 0 [0275.958] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0275.958] IsDebuggerPresent () returned 0 [0276.517] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0276.517] IsDebuggerPresent () returned 0 [0277.041] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0277.041] IsDebuggerPresent () returned 0 [0277.567] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0277.567] IsDebuggerPresent () returned 0 [0278.096] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0278.096] IsDebuggerPresent () returned 0 [0278.629] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0278.629] IsDebuggerPresent () returned 0 [0279.144] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0279.144] IsDebuggerPresent () returned 0 [0279.666] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0279.666] IsDebuggerPresent () returned 0 [0280.170] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0280.170] IsDebuggerPresent () returned 0 [0280.688] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0280.688] IsDebuggerPresent () returned 0 [0281.201] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0281.201] IsDebuggerPresent () returned 0 [0281.734] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0281.734] IsDebuggerPresent () returned 0 [0282.276] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0282.276] IsDebuggerPresent () returned 0 [0282.839] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0282.840] IsDebuggerPresent () returned 0 [0283.378] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0283.378] IsDebuggerPresent () returned 0 [0283.980] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0283.980] IsDebuggerPresent () returned 0 [0284.519] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x205ff84 | out: pbDebuggerPresent=0x205ff84) returned 1 [0284.519] IsDebuggerPresent () returned 0 Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x41711000" os_pid = "0xb2c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xb88" cmd_line = "\"C:\\Windows\\sysnative\\cmd.exe\" /c \"\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\"\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0xb1c [0055.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2cfc70 | out: lpSystemTimeAsFileTime=0x2cfc70*(dwLowDateTime=0xeb9c3bc0, dwHighDateTime=0x1d69743)) [0055.517] GetCurrentProcessId () returned 0xb2c [0055.518] GetCurrentThreadId () returned 0xb1c [0055.518] GetTickCount () returned 0x1147b29 [0055.518] QueryPerformanceCounter (in: lpPerformanceCount=0x2cfc78 | out: lpPerformanceCount=0x2cfc78*=17415702921) returned 1 [0055.524] GetModuleHandleW (lpModuleName=0x0) returned 0x4a6e0000 [0055.524] __set_app_type (_Type=0x1) [0055.524] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a707810) returned 0x0 [0055.524] __getmainargs (in: _Argc=0x4a72a608, _Argv=0x4a72a618, _Env=0x4a72a610, _DoWildCard=0, _StartInfo=0x4a70e0f4 | out: _Argc=0x4a72a608, _Argv=0x4a72a618, _Env=0x4a72a610) returned 0 [0055.525] GetCurrentThreadId () returned 0xb1c [0055.525] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb1c) returned 0x3c [0055.529] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000 [0055.529] GetProcAddress (hModule=0x77940000, lpProcName="SetThreadUILanguage") returned 0x77956d40 [0055.529] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0055.529] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0055.529] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2cfc08 | out: phkResult=0x2cfc08*=0x0) returned 0x2 [0055.530] VirtualQuery (in: lpAddress=0x2cfbf0, lpBuffer=0x2cfb70, dwLength=0x30 | out: lpBuffer=0x2cfb70*(BaseAddress=0x2cf000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0055.530] VirtualQuery (in: lpAddress=0x1d0000, lpBuffer=0x2cfb70, dwLength=0x30 | out: lpBuffer=0x2cfb70*(BaseAddress=0x1d0000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0055.530] VirtualQuery (in: lpAddress=0x1d1000, lpBuffer=0x2cfb70, dwLength=0x30 | out: lpBuffer=0x2cfb70*(BaseAddress=0x1d1000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0055.530] VirtualQuery (in: lpAddress=0x1d4000, lpBuffer=0x2cfb70, dwLength=0x30 | out: lpBuffer=0x2cfb70*(BaseAddress=0x1d4000, AllocationBase=0x1d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0055.530] VirtualQuery (in: lpAddress=0x2d0000, lpBuffer=0x2cfb70, dwLength=0x30 | out: lpBuffer=0x2cfb70*(BaseAddress=0x2d0000, AllocationBase=0x2d0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0055.530] GetConsoleOutputCP () returned 0x1b5 [0055.530] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a71bfe0 | out: lpCPInfo=0x4a71bfe0) returned 1 [0055.531] SetConsoleCtrlHandler (HandlerRoutine=0x4a703184, Add=1) returned 1 [0055.531] _get_osfhandle (_FileHandle=1) returned 0x7 [0055.531] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0055.531] _get_osfhandle (_FileHandle=1) returned 0x7 [0055.531] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a70e194 | out: lpMode=0x4a70e194) returned 1 [0055.532] _get_osfhandle (_FileHandle=1) returned 0x7 [0055.532] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0055.532] _get_osfhandle (_FileHandle=0) returned 0x3 [0055.532] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a70e198 | out: lpMode=0x4a70e198) returned 1 [0055.532] _get_osfhandle (_FileHandle=0) returned 0x3 [0055.532] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0055.533] GetEnvironmentStringsW () returned 0x4c8f90* [0055.533] GetProcessHeap () returned 0x4b0000 [0055.533] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xde4) returned 0x4c9d80 [0055.533] FreeEnvironmentStringsW (penv=0x4c8f90) returned 1 [0055.533] GetProcessHeap () returned 0x4b0000 [0055.533] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x8) returned 0x4c8e10 [0055.533] GetEnvironmentStringsW () returned 0x4c8f90* [0055.534] GetProcessHeap () returned 0x4b0000 [0055.534] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xde4) returned 0x4cab70 [0055.534] FreeEnvironmentStringsW (penv=0x4c8f90) returned 1 [0055.534] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ceac8 | out: phkResult=0x2ceac8*=0x44) returned 0x0 [0055.534] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x18, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.534] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x1, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x1, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x0, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x40, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x40, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x40, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.535] RegCloseKey (hKey=0x44) returned 0x0 [0055.535] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2ceac8 | out: phkResult=0x2ceac8*=0x44) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x40, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x1, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x1, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x0, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.535] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x9, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.536] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x4, lpData=0x2ceae0*=0x9, lpcbData=0x2ceac4*=0x4) returned 0x0 [0055.536] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2ceac0, lpData=0x2ceae0, lpcbData=0x2ceac4*=0x1000 | out: lpType=0x2ceac0*=0x0, lpData=0x2ceae0*=0x9, lpcbData=0x2ceac4*=0x1000) returned 0x2 [0055.536] RegCloseKey (hKey=0x44) returned 0x0 [0055.536] time (in: timer=0x0 | out: timer=0x0) returned 0x5f74ad76 [0055.536] srand (_Seed=0x5f74ad76) [0055.536] GetCommandLineW () returned="\"C:\\Windows\\sysnative\\cmd.exe\" /c \"\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\"\"" [0055.536] GetCommandLineW () returned="\"C:\\Windows\\sysnative\\cmd.exe\" /c \"\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\"\"" [0055.536] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a71c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0055.537] GetProcessHeap () returned 0x4b0000 [0055.537] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x218) returned 0x4cb960 [0055.537] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4cb970, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0055.537] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0055.537] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0055.537] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0055.537] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0055.537] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0055.537] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0055.537] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0055.537] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0055.537] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0055.537] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0055.537] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0055.537] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0055.538] GetProcessHeap () returned 0x4b0000 [0055.538] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c9d80 | out: hHeap=0x4b0000) returned 1 [0055.538] GetEnvironmentStringsW () returned 0x4c8f90* [0055.538] GetProcessHeap () returned 0x4b0000 [0055.538] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xdfc) returned 0x4cbb80 [0055.538] FreeEnvironmentStringsW (penv=0x4c8f90) returned 1 [0055.538] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0055.538] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0055.538] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0055.538] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0055.538] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0055.538] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0055.538] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0055.538] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0055.538] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0055.538] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0055.538] GetProcessHeap () returned 0x4b0000 [0055.538] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x5c) returned 0x4cc990 [0055.538] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2cf8d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0055.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2cf8d0, lpFilePart=0x2cf8b0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2cf8b0*="Desktop") returned 0x25 [0055.539] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0055.539] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2cf5e0 | out: lpFindFileData=0x2cf5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0001be, cFileName="Users", cAlternateFileName="")) returned 0x4cca00 [0055.539] FindClose (in: hFindFile=0x4cca00 | out: hFindFile=0x4cca00) returned 1 [0055.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2cf5e0 | out: lpFindFileData=0x2cf5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0001be, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x4cca00 [0055.539] FindClose (in: hFindFile=0x4cca00 | out: hFindFile=0x4cca00) returned 1 [0055.539] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0055.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2cf5e0 | out: lpFindFileData=0x2cf5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xbf0001be, cFileName="Desktop", cAlternateFileName="")) returned 0x4cca00 [0055.540] FindClose (in: hFindFile=0x4cca00 | out: hFindFile=0x4cca00) returned 1 [0055.540] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0055.540] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0055.540] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0055.540] GetProcessHeap () returned 0x4b0000 [0055.540] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cbb80 | out: hHeap=0x4b0000) returned 1 [0055.540] GetEnvironmentStringsW () returned 0x4cca00* [0055.540] GetProcessHeap () returned 0x4b0000 [0055.540] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe50) returned 0x4cd860 [0055.540] FreeEnvironmentStringsW (penv=0x4cca00) returned 1 [0055.540] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a71c0a0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0055.540] GetProcessHeap () returned 0x4b0000 [0055.540] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cc990 | out: hHeap=0x4b0000) returned 1 [0055.540] GetProcessHeap () returned 0x4b0000 [0055.540] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4016) returned 0x4ce6c0 [0055.541] GetProcessHeap () returned 0x4b0000 [0055.541] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x11c) returned 0x4c9df0 [0055.541] GetProcessHeap () returned 0x4b0000 [0055.541] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4010) returned 0x4d26e0 [0055.541] GetProcessHeap () returned 0x4b0000 [0055.541] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4010) returned 0x4d6700 [0055.542] GetProcessHeap () returned 0x4b0000 [0055.542] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ce6c0 | out: hHeap=0x4b0000) returned 1 [0055.542] GetConsoleOutputCP () returned 0x1b5 [0055.542] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a71bfe0 | out: lpCPInfo=0x4a71bfe0) returned 1 [0055.542] GetUserDefaultLCID () returned 0x409 [0055.542] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a717b50, cchData=8 | out: lpLCData=":") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2cf9e0, cchData=128 | out: lpLCData="0") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2cf9e0, cchData=128 | out: lpLCData="0") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2cf9e0, cchData=128 | out: lpLCData="1") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a72a740, cchData=8 | out: lpLCData="/") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a72a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a72a460, cchData=32 | out: lpLCData="Tue") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a72a420, cchData=32 | out: lpLCData="Wed") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a72a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a72a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a72a360, cchData=32 | out: lpLCData="Sat") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a72a700, cchData=32 | out: lpLCData="Sun") returned 4 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a717b40, cchData=8 | out: lpLCData=".") returned 2 [0055.543] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a72a4e0, cchData=8 | out: lpLCData=",") returned 2 [0055.543] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0055.545] GetProcessHeap () returned 0x4b0000 [0055.545] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x20c) returned 0x4c9f90 [0055.545] GetConsoleTitleW (in: lpConsoleTitle=0x4c9f90, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0055.545] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77940000 [0055.545] GetProcAddress (hModule=0x77940000, lpProcName="CopyFileExW") returned 0x779523d0 [0055.545] GetProcAddress (hModule=0x77940000, lpProcName="IsDebuggerPresent") returned 0x77948290 [0055.545] GetProcAddress (hModule=0x77940000, lpProcName="SetConsoleInputExeNameW") returned 0x779517e0 [0055.545] GetProcessHeap () returned 0x4b0000 [0055.546] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4012) returned 0x4ce6c0 [0055.546] GetProcessHeap () returned 0x4b0000 [0055.546] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ce6c0 | out: hHeap=0x4b0000) returned 1 [0055.548] _wcsicmp (_String1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"", _String2=")") returned -7 [0055.548] _wcsicmp (_String1="FOR", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 68 [0055.549] _wcsicmp (_String1="FOR/?", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 68 [0055.549] _wcsicmp (_String1="IF", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 71 [0055.549] _wcsicmp (_String1="IF/?", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 71 [0055.549] _wcsicmp (_String1="REM", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 80 [0055.549] _wcsicmp (_String1="REM/?", _String2="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"") returned 80 [0055.549] GetProcessHeap () returned 0x4b0000 [0055.549] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4ca1b0 [0055.549] GetProcessHeap () returned 0x4b0000 [0055.549] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x9a) returned 0x4ca270 [0055.551] GetProcessHeap () returned 0x4b0000 [0055.551] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x8c) returned 0x4ca320 [0055.553] GetConsoleTitleW (in: lpConsoleTitle=0x2cf8f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0055.553] GetFileAttributesW (lpFileName="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat\"" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\\"c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.bat\"")) returned 0xffffffff [0055.553] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0055.553] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0055.553] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0055.553] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0055.553] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0055.553] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0055.553] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0055.553] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0055.553] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0055.553] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0055.554] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0055.554] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0055.554] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0055.554] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0055.554] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0055.554] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0055.554] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0055.554] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0055.554] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0055.554] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0055.554] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0055.554] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0055.554] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0055.554] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0055.554] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0055.554] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0055.554] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0055.555] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0055.555] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0055.555] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0055.555] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0055.555] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0055.555] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0055.555] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0055.555] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0055.555] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0055.555] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0055.555] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0055.555] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0055.555] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0055.555] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0055.555] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0055.555] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0055.555] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0055.555] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0055.555] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0055.555] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0055.555] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0055.555] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0055.556] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0055.556] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0055.556] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0055.556] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0055.556] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0055.556] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0055.556] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0055.556] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0055.556] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0055.556] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0055.556] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0055.556] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0055.556] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0055.556] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0055.556] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0055.556] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0055.556] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0055.556] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0055.556] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0055.556] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0055.556] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0055.556] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0055.556] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0055.556] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0055.556] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0055.556] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0055.556] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0055.557] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0055.557] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0055.557] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0055.557] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0055.557] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0055.557] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0055.557] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0055.557] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0055.557] _wcsicmp (_String1="\"C", _String2="FOR") returned -68 [0055.557] _wcsicmp (_String1="\"C", _String2="IF") returned -71 [0055.557] _wcsicmp (_String1="\"C", _String2="REM") returned -80 [0055.557] GetProcessHeap () returned 0x4b0000 [0055.557] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x218) returned 0x4ca3c0 [0055.557] GetProcessHeap () returned 0x4b0000 [0055.557] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x116) returned 0x4ca5e0 [0055.564] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0055.564] GetProcessHeap () returned 0x4b0000 [0055.564] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x420) returned 0x4ca700 [0055.565] SetErrorMode (uMode=0x0) returned 0x0 [0055.565] SetErrorMode (uMode=0x1) returned 0x0 [0055.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\.", nBufferLength=0x208, lpBuffer=0x4ca710, lpFilePart=0x2cf180 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp", lpFilePart=0x2cf180*="D00A.tmp") returned 0x39 [0055.565] SetErrorMode (uMode=0x0) returned 0x1 [0055.565] GetProcessHeap () returned 0x4b0000 [0055.565] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4ca700, Size=0x96) returned 0x4ca700 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4ca700) returned 0x96 [0055.566] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\.") returned 1 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x8a) returned 0x4ca7b0 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x100) returned 0x4ca850 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4ca850, Size=0x8a) returned 0x4ca850 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4ca850) returned 0x8a [0055.566] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0055.566] GetProcessHeap () returned 0x4b0000 [0055.566] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe8) returned 0x4ca8f0 [0055.570] GetProcessHeap () returned 0x4b0000 [0055.570] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4ca8f0, Size=0x7e) returned 0x4ca8f0 [0055.570] GetProcessHeap () returned 0x4b0000 [0055.570] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4ca8f0) returned 0x7e [0055.570] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0055.571] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat", fInfoLevelId=0x1, lpFindFileData=0x2ceef0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ceef0) returned 0x4ca980 [0055.571] GetProcessHeap () returned 0x4b0000 [0055.571] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x28) returned 0x4c4ac0 [0055.571] FindClose (in: hFindFile=0x4ca980 | out: hFindFile=0x4ca980) returned 1 [0055.571] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0055.571] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0055.571] GetConsoleTitleW (in: lpConsoleTitle=0x2cf440, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0055.571] GetProcessHeap () returned 0x4b0000 [0055.571] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1e8) returned 0x4ca980 [0055.571] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff550000 [0060.718] GetProcAddress (hModule=0x7feff550000, lpProcName="SaferIdentifyLevel") returned 0x7feff56e470 [0060.718] IdentifyCodeAuthzLevelW () returned 0x1 [0060.733] GetProcAddress (hModule=0x7feff550000, lpProcName="SaferComputeTokenFromLevel") returned 0x7feff56f9b0 [0060.733] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0060.734] GetProcAddress (hModule=0x7feff550000, lpProcName="SaferCloseLevel") returned 0x7feff56f660 [0060.734] CloseCodeAuthzLevel () returned 0x1 [0060.734] SetErrorMode (uMode=0x0) returned 0x0 [0060.734] SetErrorMode (uMode=0x1) returned 0x0 [0060.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat", nBufferLength=0x104, lpBuffer=0x4ca3d0, lpFilePart=0x2cf270 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat", lpFilePart=0x2cf270*="D01B.bat") returned 0x42 [0060.734] SetErrorMode (uMode=0x0) returned 0x1 [0060.734] GetProcessHeap () returned 0x4b0000 [0060.734] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x9a) returned 0x4db060 [0060.734] wcsspn (_String=" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\x22p4FOu0H3dU8Or.exe\"", _Control=" \x09") returned 0x1 [0060.734] GetProcessHeap () returned 0x4b0000 [0060.734] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x8a) returned 0x4db110 [0060.734] GetProcessHeap () returned 0x4b0000 [0060.734] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x104) returned 0x4db1b0 [0060.734] GetProcessHeap () returned 0x4b0000 [0060.734] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4db1b0, Size=0x8c) returned 0x4db1b0 [0060.735] GetProcessHeap () returned 0x4b0000 [0060.735] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4db1b0) returned 0x8c [0060.735] CmdBatNotification () returned 0x0 [0060.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2cf2d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0060.736] _open_osfhandle (_OSFileHandle=0x5c, _Flags=8) returned 3 [0060.737] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.737] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.737] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.737] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.737] ReadFile (in: hFile=0x5c, lpBuffer=0x4a71c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cf0e0, lpOverlapped=0x0 | out: lpBuffer=0x4a71c320*, lpNumberOfBytesRead=0x2cf0e0*=0x47, lpOverlapped=0x0) returned 1 [0060.740] SetFilePointer (in: hFile=0x5c, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0060.740] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a71c320, cbMultiByte=11, lpWideCharStr=0x4a71e320, cchWideChar=8191 | out: lpWideCharStr="@shift /0\r\n") returned 11 [0060.740] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.740] GetFileType (hFile=0x5c) returned 0x1 [0060.740] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.740] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0060.740] GetProcessHeap () returned 0x4b0000 [0060.740] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4012) returned 0x4ce6c0 [0060.740] GetProcessHeap () returned 0x4b0000 [0060.740] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ce6c0 | out: hHeap=0x4b0000) returned 1 [0060.741] GetProcessHeap () returned 0x4b0000 [0060.741] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4db250 [0060.741] _wcsicmp (_String1="shift", _String2=")") returned 74 [0060.741] _wcsicmp (_String1="FOR", _String2="shift") returned -13 [0060.741] _wcsicmp (_String1="FOR/?", _String2="shift") returned -13 [0060.741] _wcsicmp (_String1="IF", _String2="shift") returned -10 [0060.741] _wcsicmp (_String1="IF/?", _String2="shift") returned -10 [0060.741] _wcsicmp (_String1="REM", _String2="shift") returned -1 [0060.741] _wcsicmp (_String1="REM/?", _String2="shift") returned -1 [0060.741] GetProcessHeap () returned 0x4b0000 [0060.741] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4db310 [0060.742] GetProcessHeap () returned 0x4b0000 [0060.742] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1c) returned 0x4c4af0 [0060.742] GetProcessHeap () returned 0x4b0000 [0060.742] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x18) returned 0x4daa70 [0060.743] _tell (_FileHandle=3) returned 11 [0060.744] _close (_FileHandle=3) returned 0 [0060.744] _wcsicmp (_String1="shift", _String2="DIR") returned 15 [0060.744] _wcsicmp (_String1="shift", _String2="ERASE") returned 14 [0060.744] _wcsicmp (_String1="shift", _String2="DEL") returned 15 [0060.744] _wcsicmp (_String1="shift", _String2="TYPE") returned -1 [0060.744] _wcsicmp (_String1="shift", _String2="COPY") returned 16 [0060.744] _wcsicmp (_String1="shift", _String2="CD") returned 16 [0060.744] _wcsicmp (_String1="shift", _String2="CHDIR") returned 16 [0060.744] _wcsicmp (_String1="shift", _String2="RENAME") returned 1 [0060.744] _wcsicmp (_String1="shift", _String2="REN") returned 1 [0060.744] _wcsicmp (_String1="shift", _String2="ECHO") returned 14 [0060.744] _wcsicmp (_String1="shift", _String2="SET") returned 3 [0060.744] _wcsicmp (_String1="shift", _String2="PAUSE") returned 3 [0060.744] _wcsicmp (_String1="shift", _String2="DATE") returned 15 [0060.744] _wcsicmp (_String1="shift", _String2="TIME") returned -1 [0060.744] _wcsicmp (_String1="shift", _String2="PROMPT") returned 3 [0060.744] _wcsicmp (_String1="shift", _String2="MD") returned 6 [0060.744] _wcsicmp (_String1="shift", _String2="MKDIR") returned 6 [0060.744] _wcsicmp (_String1="shift", _String2="RD") returned 1 [0060.744] _wcsicmp (_String1="shift", _String2="RMDIR") returned 1 [0060.744] _wcsicmp (_String1="shift", _String2="PATH") returned 3 [0060.745] _wcsicmp (_String1="shift", _String2="GOTO") returned 12 [0060.745] _wcsicmp (_String1="shift", _String2="SHIFT") returned 0 [0060.745] GetConsoleTitleW (in: lpConsoleTitle=0x2cf080, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0060.746] _wcsicmp (_String1="shift", _String2="DIR") returned 15 [0060.746] _wcsicmp (_String1="shift", _String2="ERASE") returned 14 [0060.746] _wcsicmp (_String1="shift", _String2="DEL") returned 15 [0060.746] _wcsicmp (_String1="shift", _String2="TYPE") returned -1 [0060.746] _wcsicmp (_String1="shift", _String2="COPY") returned 16 [0060.746] _wcsicmp (_String1="shift", _String2="CD") returned 16 [0060.746] _wcsicmp (_String1="shift", _String2="CHDIR") returned 16 [0060.746] _wcsicmp (_String1="shift", _String2="RENAME") returned 1 [0060.746] _wcsicmp (_String1="shift", _String2="REN") returned 1 [0060.746] _wcsicmp (_String1="shift", _String2="ECHO") returned 14 [0060.746] _wcsicmp (_String1="shift", _String2="SET") returned 3 [0060.746] _wcsicmp (_String1="shift", _String2="PAUSE") returned 3 [0060.746] _wcsicmp (_String1="shift", _String2="DATE") returned 15 [0060.746] _wcsicmp (_String1="shift", _String2="TIME") returned -1 [0060.747] _wcsicmp (_String1="shift", _String2="PROMPT") returned 3 [0060.747] _wcsicmp (_String1="shift", _String2="MD") returned 6 [0060.747] _wcsicmp (_String1="shift", _String2="MKDIR") returned 6 [0060.747] _wcsicmp (_String1="shift", _String2="RD") returned 1 [0060.747] _wcsicmp (_String1="shift", _String2="RMDIR") returned 1 [0060.747] _wcsicmp (_String1="shift", _String2="PATH") returned 3 [0060.747] _wcsicmp (_String1="shift", _String2="GOTO") returned 12 [0060.747] _wcsicmp (_String1="shift", _String2="SHIFT") returned 0 [0060.747] GetProcessHeap () returned 0x4b0000 [0060.747] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x20) returned 0x4b1ac0 [0060.747] GetProcessHeap () returned 0x4b0000 [0060.748] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b1ac0, Size=0x1a) returned 0x4b1af0 [0060.748] GetProcessHeap () returned 0x4b0000 [0060.748] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b1af0) returned 0x1a [0060.748] GetProcessHeap () returned 0x4b0000 [0060.748] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x24) returned 0x4b1ac0 [0060.748] _get_osfhandle (_FileHandle=1) returned 0x7 [0060.748] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0060.749] _get_osfhandle (_FileHandle=1) returned 0x7 [0060.749] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a70e194 | out: lpMode=0x4a70e194) returned 1 [0060.749] _get_osfhandle (_FileHandle=0) returned 0x3 [0060.749] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a70e198 | out: lpMode=0x4a70e198) returned 1 [0060.749] SetConsoleInputExeNameW () returned 0x1 [0060.749] GetConsoleOutputCP () returned 0x1b5 [0060.749] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a71bfe0 | out: lpCPInfo=0x4a71bfe0) returned 1 [0060.749] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0060.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2cf2d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0060.750] _open_osfhandle (_OSFileHandle=0x5c, _Flags=8) returned 3 [0060.750] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.750] SetFilePointer (in: hFile=0x5c, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b1ac0 | out: hHeap=0x4b0000) returned 1 [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b1af0 | out: hHeap=0x4b0000) returned 1 [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4daa70 | out: hHeap=0x4b0000) returned 1 [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4af0 | out: hHeap=0x4b0000) returned 1 [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4db310 | out: hHeap=0x4b0000) returned 1 [0060.750] GetProcessHeap () returned 0x4b0000 [0060.750] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4db250 | out: hHeap=0x4b0000) returned 1 [0060.750] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.751] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0060.751] ReadFile (in: hFile=0x5c, lpBuffer=0x4a71c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cf0e0, lpOverlapped=0x0 | out: lpBuffer=0x4a71c320*, lpNumberOfBytesRead=0x2cf0e0*=0x3c, lpOverlapped=0x0) returned 1 [0060.751] SetFilePointer (in: hFile=0x5c, lDistanceToMove=22, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0060.751] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a71c320, cbMultiByte=11, lpWideCharStr=0x4a71e320, cchWideChar=8191 | out: lpWideCharStr="@echo off\r\n") returned 11 [0060.751] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.751] GetFileType (hFile=0x5c) returned 0x1 [0060.751] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.751] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0060.751] GetProcessHeap () returned 0x4b0000 [0060.751] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4012) returned 0x4ce6c0 [0060.751] GetProcessHeap () returned 0x4b0000 [0060.751] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ce6c0 | out: hHeap=0x4b0000) returned 1 [0060.751] GetProcessHeap () returned 0x4b0000 [0060.751] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4db250 [0060.752] _wcsicmp (_String1="echo", _String2=")") returned 60 [0060.752] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0060.752] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0060.752] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0060.752] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0060.752] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0060.752] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0060.752] GetProcessHeap () returned 0x4b0000 [0060.752] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4db310 [0060.752] GetProcessHeap () returned 0x4b0000 [0060.752] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1a) returned 0x4c4af0 [0060.752] GetProcessHeap () returned 0x4b0000 [0060.752] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1a) returned 0x4b1af0 [0060.754] _tell (_FileHandle=3) returned 22 [0060.754] _close (_FileHandle=3) returned 0 [0060.754] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0060.754] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0060.754] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0060.754] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0060.754] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0060.754] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0060.754] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0060.754] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0060.754] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0060.754] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0060.754] GetConsoleTitleW (in: lpConsoleTitle=0x2cf080, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0060.755] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0060.755] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0060.755] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0060.755] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0060.755] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0060.755] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0060.755] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0060.755] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0060.755] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0060.755] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0060.755] GetProcessHeap () returned 0x4b0000 [0060.755] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x24) returned 0x4b1ac0 [0060.755] GetProcessHeap () returned 0x4b0000 [0060.755] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4b1ac0, Size=0x1a) returned 0x4b1b20 [0060.755] GetProcessHeap () returned 0x4b0000 [0060.755] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4b1b20) returned 0x1a [0060.755] GetProcessHeap () returned 0x4b0000 [0060.755] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x24) returned 0x4b1ac0 [0060.756] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0 [0060.756] _get_osfhandle (_FileHandle=1) returned 0x7 [0060.756] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0060.756] _get_osfhandle (_FileHandle=1) returned 0x7 [0060.756] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a70e194 | out: lpMode=0x4a70e194) returned 1 [0060.756] _get_osfhandle (_FileHandle=0) returned 0x3 [0060.756] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a70e198 | out: lpMode=0x4a70e198) returned 1 [0060.756] SetConsoleInputExeNameW () returned 0x1 [0060.756] GetConsoleOutputCP () returned 0x1b5 [0060.756] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a71bfe0 | out: lpCPInfo=0x4a71bfe0) returned 1 [0060.757] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0060.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D00A.tmp\\D01B.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\d00a.tmp\\d01b.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2cf2d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0060.757] _open_osfhandle (_OSFileHandle=0x5c, _Flags=8) returned 3 [0060.757] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.757] SetFilePointer (in: hFile=0x5c, lDistanceToMove=22, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b1ac0 | out: hHeap=0x4b0000) returned 1 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b1b20 | out: hHeap=0x4b0000) returned 1 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4b1af0 | out: hHeap=0x4b0000) returned 1 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4af0 | out: hHeap=0x4b0000) returned 1 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4db310 | out: hHeap=0x4b0000) returned 1 [0060.757] GetProcessHeap () returned 0x4b0000 [0060.757] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4db250 | out: hHeap=0x4b0000) returned 1 [0060.757] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.757] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0060.758] ReadFile (in: hFile=0x5c, lpBuffer=0x4a71c320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cf0e0, lpOverlapped=0x0 | out: lpBuffer=0x4a71c320*, lpNumberOfBytesRead=0x2cf0e0*=0x31, lpOverlapped=0x0) returned 1 [0060.758] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x4a71c320, cbMultiByte=49, lpWideCharStr=0x4a71e320, cchWideChar=8191 | out: lpWideCharStr="psexec hyBrDFjOidLuty.exe /accepteula -s -high \r\n") returned 49 [0060.758] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.758] GetFileType (hFile=0x5c) returned 0x1 [0060.758] _get_osfhandle (_FileHandle=3) returned 0x5c [0060.758] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x47 [0060.758] GetProcessHeap () returned 0x4b0000 [0060.758] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4012) returned 0x4ce6c0 [0060.758] GetProcessHeap () returned 0x4b0000 [0060.758] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ce6c0 | out: hHeap=0x4b0000) returned 1 [0060.758] GetProcessHeap () returned 0x4b0000 [0060.758] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4db250 [0060.758] GetProcessHeap () returned 0x4b0000 [0060.758] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1e) returned 0x4c4af0 [0060.759] GetProcessHeap () returned 0x4b0000 [0060.759] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x64) returned 0x4db310 [0060.759] _tell (_FileHandle=3) returned 71 [0060.759] _close (_FileHandle=3) returned 0 [0060.759] _wcsicmp (_String1="psexec", _String2="DIR") returned 12 [0060.759] _wcsicmp (_String1="psexec", _String2="ERASE") returned 11 [0060.759] _wcsicmp (_String1="psexec", _String2="DEL") returned 12 [0060.759] _wcsicmp (_String1="psexec", _String2="TYPE") returned -4 [0060.759] _wcsicmp (_String1="psexec", _String2="COPY") returned 13 [0060.760] _wcsicmp (_String1="psexec", _String2="CD") returned 13 [0060.760] _wcsicmp (_String1="psexec", _String2="CHDIR") returned 13 [0060.760] _wcsicmp (_String1="psexec", _String2="RENAME") returned -2 [0060.760] _wcsicmp (_String1="psexec", _String2="REN") returned -2 [0060.760] _wcsicmp (_String1="psexec", _String2="ECHO") returned 11 [0060.760] _wcsicmp (_String1="psexec", _String2="SET") returned -3 [0060.760] _wcsicmp (_String1="psexec", _String2="PAUSE") returned 18 [0060.760] _wcsicmp (_String1="psexec", _String2="DATE") returned 12 [0060.760] _wcsicmp (_String1="psexec", _String2="TIME") returned -4 [0060.760] _wcsicmp (_String1="psexec", _String2="PROMPT") returned 1 [0060.760] _wcsicmp (_String1="psexec", _String2="MD") returned 3 [0060.760] _wcsicmp (_String1="psexec", _String2="MKDIR") returned 3 [0060.760] _wcsicmp (_String1="psexec", _String2="RD") returned -2 [0060.760] _wcsicmp (_String1="psexec", _String2="RMDIR") returned -2 [0060.760] _wcsicmp (_String1="psexec", _String2="PATH") returned 18 [0060.760] _wcsicmp (_String1="psexec", _String2="GOTO") returned 9 [0060.760] _wcsicmp (_String1="psexec", _String2="SHIFT") returned -3 [0060.760] _wcsicmp (_String1="psexec", _String2="CLS") returned 13 [0060.760] _wcsicmp (_String1="psexec", _String2="CALL") returned 13 [0060.760] _wcsicmp (_String1="psexec", _String2="VERIFY") returned -6 [0060.760] _wcsicmp (_String1="psexec", _String2="VER") returned -6 [0060.760] _wcsicmp (_String1="psexec", _String2="VOL") returned -6 [0060.760] _wcsicmp (_String1="psexec", _String2="EXIT") returned 11 [0060.760] _wcsicmp (_String1="psexec", _String2="SETLOCAL") returned -3 [0060.760] _wcsicmp (_String1="psexec", _String2="ENDLOCAL") returned 11 [0060.760] _wcsicmp (_String1="psexec", _String2="TITLE") returned -4 [0060.760] _wcsicmp (_String1="psexec", _String2="START") returned -3 [0060.760] _wcsicmp (_String1="psexec", _String2="DPATH") returned 12 [0060.760] _wcsicmp (_String1="psexec", _String2="KEYS") returned 5 [0060.761] _wcsicmp (_String1="psexec", _String2="MOVE") returned 3 [0060.761] _wcsicmp (_String1="psexec", _String2="PUSHD") returned -2 [0060.761] _wcsicmp (_String1="psexec", _String2="POPD") returned 4 [0060.761] _wcsicmp (_String1="psexec", _String2="ASSOC") returned 15 [0060.761] _wcsicmp (_String1="psexec", _String2="FTYPE") returned 10 [0060.761] _wcsicmp (_String1="psexec", _String2="BREAK") returned 14 [0060.761] _wcsicmp (_String1="psexec", _String2="COLOR") returned 13 [0060.761] _wcsicmp (_String1="psexec", _String2="MKLINK") returned 3 [0060.761] GetProcessHeap () returned 0x4b0000 [0060.761] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x420) returned 0x4db380 [0060.761] SetErrorMode (uMode=0x0) returned 0x0 [0060.761] SetErrorMode (uMode=0x1) returned 0x0 [0060.761] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4db390, lpFilePart=0x2cf0c0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2cf0c0*="Desktop") returned 0x25 [0060.761] SetErrorMode (uMode=0x0) returned 0x1 [0060.761] GetProcessHeap () returned 0x4b0000 [0060.761] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4db380, Size=0x6a) returned 0x4db380 [0060.761] GetProcessHeap () returned 0x4b0000 [0060.761] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4db380) returned 0x6a [0060.761] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0060.761] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0060.761] GetProcessHeap () returned 0x4b0000 [0060.761] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x128) returned 0x4db400 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x240) returned 0x4db530 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4db530, Size=0x12a) returned 0x4db530 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4db530) returned 0x12a [0060.762] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe8) returned 0x4db670 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4db670, Size=0x7e) returned 0x4db670 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4db670) returned 0x7e [0060.762] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0060.762] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\psexec.*", fInfoLevelId=0x1, lpFindFileData=0x2cee30, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee30) returned 0x4b1730 [0060.762] GetProcessHeap () returned 0x4b0000 [0060.762] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c4ac0, Size=0x8) returned 0x4db700 [0060.762] FindClose (in: hFindFile=0x4b1730 | out: hFindFile=0x4b1730) returned 1 [0060.762] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.COM", fInfoLevelId=0x1, lpFindFileData=0x2cee30, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee30) returned 0xffffffffffffffff [0060.763] GetLastError () returned 0x2 [0060.763] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.EXE", fInfoLevelId=0x1, lpFindFileData=0x2cee30, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee30) returned 0x4b1730 [0060.763] FindClose (in: hFindFile=0x4b1730 | out: hFindFile=0x4b1730) returned 1 [0060.763] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0060.763] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0060.763] GetConsoleTitleW (in: lpConsoleTitle=0x2cf080, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0060.763] GetProcessHeap () returned 0x4b0000 [0060.763] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x218) returned 0x4db720 [0060.763] GetProcessHeap () returned 0x4b0000 [0060.763] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x72) returned 0x4db940 [0060.763] GetProcessHeap () returned 0x4b0000 [0060.763] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x420) returned 0x4db9c0 [0060.763] SetErrorMode (uMode=0x0) returned 0x0 [0060.763] SetErrorMode (uMode=0x1) returned 0x0 [0060.764] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x4db9d0, lpFilePart=0x2ce910 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ce910*="Desktop") returned 0x25 [0060.764] SetErrorMode (uMode=0x0) returned 0x1 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4db9c0, Size=0x6a) returned 0x4db9c0 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4db9c0) returned 0x6a [0060.764] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0060.764] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x128) returned 0x4dba40 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x240) returned 0x4dbb70 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4dbb70, Size=0x12a) returned 0x4dbb70 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4dbb70) returned 0x12a [0060.764] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a70f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe8) returned 0x4dbcb0 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4dbcb0, Size=0x7e) returned 0x4dbcb0 [0060.764] GetProcessHeap () returned 0x4b0000 [0060.764] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4dbcb0) returned 0x7e [0060.764] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0060.764] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\psexec.*", fInfoLevelId=0x1, lpFindFileData=0x2ce680, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ce680) returned 0x4b1730 [0060.764] FindClose (in: hFindFile=0x4b1730 | out: hFindFile=0x4b1730) returned 1 [0060.765] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.COM", fInfoLevelId=0x1, lpFindFileData=0x2ce680, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ce680) returned 0xffffffffffffffff [0060.765] GetLastError () returned 0x2 [0060.765] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.EXE", fInfoLevelId=0x1, lpFindFileData=0x2ce680, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ce680) returned 0x4b1730 [0060.765] FindClose (in: hFindFile=0x4b1730 | out: hFindFile=0x4b1730) returned 1 [0060.765] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0060.765] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0060.765] GetConsoleTitleW (in: lpConsoleTitle=0x2cebd0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\sysnative\\cmd.exe") returned 0x1c [0060.765] InitializeProcThreadAttributeList (in: lpAttributeList=0x2ce988, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2ce948 | out: lpAttributeList=0x2ce988, lpSize=0x2ce948) returned 1 [0060.765] UpdateProcThreadAttribute (in: lpAttributeList=0x2ce988, dwFlags=0x0, Attribute=0x60001, lpValue=0x2ce938, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2ce988, lpPreviousValue=0x0) returned 1 [0060.765] GetStartupInfoW (in: lpStartupInfo=0x2ceaa0 | out: lpStartupInfo=0x2ceaa0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\sysnative\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0060.765] GetProcessHeap () returned 0x4b0000 [0060.765] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x20) returned 0x4c4ac0 [0060.765] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0060.765] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0060.765] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eargs", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eincf", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eincf", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eincf", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eincf", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eprog", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eprog", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eprog", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2eprog", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="b2etemp", _MaxCount=0x7) returned 1 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0060.766] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0060.767] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0060.767] GetProcessHeap () returned 0x4b0000 [0060.767] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c4ac0 | out: hHeap=0x4b0000) returned 1 [0060.767] GetProcessHeap () returned 0x4b0000 [0060.767] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x12) returned 0x4daa70 [0060.767] lstrcmpW (lpString1="\\PsExec.exe", lpString2="\\XCOPY.EXE") returned -1 [0060.769] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.exe", lpCommandLine="psexec hyBrDFjOidLuty.exe /accepteula -s -high ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2ce9c0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="psexec hyBrDFjOidLuty.exe /accepteula -s -high ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2ce970 | out: lpCommandLine="psexec hyBrDFjOidLuty.exe /accepteula -s -high ", lpProcessInformation=0x2ce970*(hProcess=0x58, hThread=0x5c, dwProcessId=0xa94, dwThreadId=0xb24)) returned 1 [0060.791] CloseHandle (hObject=0x5c) returned 1 [0060.791] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0060.791] GetProcessHeap () returned 0x4b0000 [0060.792] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cd860 | out: hHeap=0x4b0000) returned 1 [0060.792] GetEnvironmentStringsW () returned 0x4dbec0* [0060.792] GetProcessHeap () returned 0x4b0000 [0060.792] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xe50) returned 0x4dcd20 [0060.792] FreeEnvironmentStringsW (penv=0x4dbec0) returned 1 [0060.792] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) Process: id = "3" image_name = "psexec.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psexec.exe" page_root = "0x414ee000" os_pid = "0xa94" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb2c" cmd_line = "psexec hyBrDFjOidLuty.exe /accepteula -s -high " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0xb24 [0061.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2bfea0 | out: lpSystemTimeAsFileTime=0x2bfea0*(dwLowDateTime=0xebd06b20, dwHighDateTime=0x1d69743)) [0061.607] GetCurrentThreadId () returned 0xb24 [0061.607] GetCurrentProcessId () returned 0xa94 [0061.607] QueryPerformanceCounter (in: lpPerformanceCount=0x2bfe98 | out: lpPerformanceCount=0x2bfe98*=18045573175) returned 1 [0061.817] GetProcessHeap () returned 0x5c0000 [0061.820] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0061.820] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0061.821] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0061.822] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0061.823] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0061.823] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0061.823] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0061.823] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0061.823] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0061.824] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0061.825] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0061.825] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0061.825] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0061.825] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0061.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x5d7810 [0061.826] GetCurrentThreadId () returned 0xb24 [0061.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x5d20e8 [0061.826] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d7bd8 [0061.826] GetStartupInfoW (in: lpStartupInfo=0x2bfe00 | out: lpStartupInfo=0x2bfe00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="psexec hyBrDFjOidLuty.exe /accepteula -s -high ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x81ad15, hStdOutput=0xd99f652c, hStdError=0x0)) [0061.826] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0061.826] GetFileType (hFile=0x3) returned 0x2 [0061.827] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0061.827] GetFileType (hFile=0x7) returned 0x2 [0061.827] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0061.827] GetFileType (hFile=0xb) returned 0x2 [0061.828] GetCommandLineW () returned="psexec hyBrDFjOidLuty.exe /accepteula -s -high " [0061.828] GetEnvironmentStringsW () returned 0x5d83e0* [0061.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xe9e) returned 0x5d9288 [0061.828] FreeEnvironmentStringsW (penv=0x5d83e0) returned 1 [0061.828] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x841420, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psexec.exe")) returned 0x30 [0061.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x76) returned 0x5d0208 [0061.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc4) returned 0x5d83e0 [0061.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5d4140 [0061.828] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x5d84b0 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d2108 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d8528 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5d4188 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d8560 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x5d8590 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x50) returned 0x5d8608 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x94) returned 0x5d8660 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x74) returned 0x5d0288 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x76) returned 0x5d0308 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x5d8700 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x5d8798 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x5d0388 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x5d8810 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d8880 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5d88b8 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x5d8908 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x5d6fb0 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x5d8938 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x5d0408 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d8990 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d89c8 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x5d6fd8 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x5d8a00 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x5d8ae0 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5d8b68 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x5d41d0 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x5d8ba8 [0061.829] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d8c40 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d8c70 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5d8ca8 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5d8ce8 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5d8d38 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5d4218 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d2128 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x5d8d98 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d8e28 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5d7000 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x5d8e60 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5d8e98 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5d8ef8 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d8f58 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5d4260 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5d8f90 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d8ff0 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d9020 [0061.830] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x5d9058 [0061.830] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d9288 | out: hHeap=0x5c0000) returned 1 [0061.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d90f0 [0061.831] GetLastError () returned 0x0 [0061.831] SetLastError (dwErrCode=0x0) [0061.831] GetLastError () returned 0x0 [0061.831] SetLastError (dwErrCode=0x0) [0061.831] GetLastError () returned 0x0 [0061.831] SetLastError (dwErrCode=0x0) [0061.831] GetACP () returned 0x4e4 [0061.831] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x5d98f8 [0061.831] GetLastError () returned 0x0 [0061.831] SetLastError (dwErrCode=0x0) [0061.832] IsValidCodePage (CodePage=0x4e4) returned 1 [0061.832] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2bfdf4 | out: lpCPInfo=0x2bfdf4) returned 1 [0061.832] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2bf8bc | out: lpCPInfo=0x2bf8bc) returned 1 [0061.832] GetLastError () returned 0x0 [0061.832] SetLastError (dwErrCode=0x0) [0061.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0061.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x2bf638, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0061.832] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x2bf8d0 | out: lpCharType=0x2bf8d0) returned 1 [0061.832] GetLastError () returned 0x0 [0061.832] SetLastError (dwErrCode=0x0) [0061.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0061.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x2bf608, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0061.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0061.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x2bf3f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0061.832] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x2bfbd0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9cf\x9fÙ\x0cþ+", lpUsedDefaultChar=0x0) returned 256 [0061.832] GetLastError () returned 0x0 [0061.832] SetLastError (dwErrCode=0x0) [0061.833] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0061.833] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2bfcd0, cbMultiByte=256, lpWideCharStr=0x2bf628, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﬽\x81Ā") returned 256 [0061.833] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﬽\x81Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0061.833] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﬽\x81Ā", cchSrc=256, lpDestStr=0x2bf418, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0061.833] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x2bfad0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x9cf\x9fÙ\x0cþ+", lpUsedDefaultChar=0x0) returned 256 [0061.833] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x80) returned 0x5d9b20 [0061.833] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0061.833] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x821145) returned 0x0 [0061.833] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d9b20) returned 0x80 [0061.834] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x14) returned 0x5d9ff0 [0061.834] GetLastError () returned 0x0 [0061.834] SetLastError (dwErrCode=0x0) [0061.835] GetLastError () returned 0x0 [0061.835] SetLastError (dwErrCode=0x0) [0061.835] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Sysinternals", ulOptions=0x0, samDesired=0x101, phkResult=0x2b7bcc | out: phkResult=0x2b7bcc*=0x0) returned 0x2 [0061.835] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Sysinternals", ulOptions=0x0, samDesired=0x101, phkResult=0x2b7bdc | out: phkResult=0x2b7bdc*=0x0) returned 0x2 [0061.835] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Sysinternals\\PsExec", ulOptions=0x0, samDesired=0x101, phkResult=0x2b7bdc | out: phkResult=0x2b7bdc*=0x0) returned 0x2 [0061.835] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2b7c04, nSize=0x208 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\psexec.exe")) returned 0x30 [0061.835] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.exe", lpdwHandle=0x2b7bf8 | out: lpdwHandle=0x2b7bf8) returned 0x64c [0061.836] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x64c) returned 0x5da010 [0061.836] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PsExec.exe", dwHandle=0x0, dwLen=0x64c, lpData=0x5da010 | out: lpData=0x5da010) returned 1 [0061.836] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2b79d4, puLen=0x2b79c4 | out: lplpBuffer=0x2b79d4*=0x5da330, puLen=0x2b79c4) returned 1 [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.874] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\StringFileInfo\\040904B0\\InternalName", lplpBuffer=0x2b79d0, puLen=0x2b79c8 | out: lplpBuffer=0x2b79d0*=0x5da1b8, puLen=0x2b79c8) returned 1 [0061.874] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2b79cc, puLen=0x2b79bc | out: lplpBuffer=0x2b79cc*=0x5da330, puLen=0x2b79bc) returned 1 [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.874] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\StringFileInfo\\040904B0\\FileVersion", lplpBuffer=0x2b79c8, puLen=0x2b79c0 | out: lplpBuffer=0x2b79c8*=0x5da190, puLen=0x2b79c0) returned 1 [0061.874] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2b79c4, puLen=0x2b79b4 | out: lplpBuffer=0x2b79c4*=0x5da330, puLen=0x2b79b4) returned 1 [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.874] GetLastError () returned 0x0 [0061.874] SetLastError (dwErrCode=0x0) [0061.875] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\StringFileInfo\\040904B0\\FileDescription", lplpBuffer=0x2b79c0, puLen=0x2b79b8 | out: lplpBuffer=0x2b79c0*=0x5da138, puLen=0x2b79b8) returned 1 [0061.875] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2b79bc, puLen=0x2b79ac | out: lplpBuffer=0x2b79bc*=0x5da330, puLen=0x2b79ac) returned 1 [0061.875] GetLastError () returned 0x0 [0061.875] SetLastError (dwErrCode=0x0) [0061.875] GetLastError () returned 0x0 [0061.875] SetLastError (dwErrCode=0x0) [0061.875] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\StringFileInfo\\040904B0\\LegalCopyright", lplpBuffer=0x2b79b8, puLen=0x2b79b0 | out: lplpBuffer=0x2b79b8*=0x5da1ec, puLen=0x2b79b0) returned 1 [0061.875] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2b79b4, puLen=0x2b79a4 | out: lplpBuffer=0x2b79b4*=0x5da330, puLen=0x2b79a4) returned 1 [0061.875] GetLastError () returned 0x0 [0061.875] SetLastError (dwErrCode=0x0) [0061.875] GetLastError () returned 0x0 [0061.875] SetLastError (dwErrCode=0x0) [0061.875] VerQueryValueW (in: pBlock=0x5da010, lpSubBlock="\\StringFileInfo\\040904B0\\CompanyName", lplpBuffer=0x2b79b0, puLen=0x2b79a8 | out: lplpBuffer=0x2b79b0*=0x5da0c8, puLen=0x2b79a8) returned 1 [0061.875] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0061.875] GetFileType (hFile=0x7) returned 0x2 [0061.876] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1000) returned 0x5da7b0 [0061.876] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.877] SetLastError (dwErrCode=0x0) [0061.877] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.878] GetLastError () returned 0x0 [0061.878] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.879] GetLastError () returned 0x0 [0061.879] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.880] SetLastError (dwErrCode=0x0) [0061.880] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.881] GetLastError () returned 0x0 [0061.881] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.882] GetLastError () returned 0x0 [0061.882] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.883] GetLastError () returned 0x0 [0061.883] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.884] GetLastError () returned 0x0 [0061.884] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.885] GetLastError () returned 0x0 [0061.885] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.902] SetLastError (dwErrCode=0x0) [0061.902] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.903] SetLastError (dwErrCode=0x0) [0061.903] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.904] GetLastError () returned 0x0 [0061.904] SetLastError (dwErrCode=0x0) [0061.905] GetLastError () returned 0x0 [0061.905] SetLastError (dwErrCode=0x0) [0061.905] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x2b5fe8 | out: lpMode=0x2b5fe8) returned 1 [0061.905] WriteFile (in: hFile=0xb, lpBuffer=0x2b66c4*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x2b5ff0, lpOverlapped=0x0 | out: lpBuffer=0x2b66c4*, lpNumberOfBytesWritten=0x2b5ff0*=0x7d, lpOverlapped=0x0) returned 1 [0061.906] GetLastError () returned 0x0 [0061.906] SetLastError (dwErrCode=0x0) [0061.906] GetLastError () returned 0x0 [0061.906] SetLastError (dwErrCode=0x0) [0061.906] RegCreateKeyW (in: hKey=0x80000001, lpSubKey="Software\\Sysinternals\\PsExec", phkResult=0x2b7bf4 | out: phkResult=0x2b7bf4*=0xc4) returned 0x0 [0061.907] RegSetValueExW (in: hKey=0xc4, lpValueName="EulaAccepted", Reserved=0x0, dwType=0x4, lpData=0x2b7e10*=0x1, cbData=0x4 | out: lpData=0x2b7e10*=0x1) returned 0x0 [0061.907] RegCloseKey (hKey=0xc4) returned 0x0 [0061.907] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d9ff0 | out: hHeap=0x5c0000) returned 1 [0061.908] GetComputerNameW (in: lpBuffer=0x865ac0, nSize=0x2b7e50 | out: lpBuffer="XDUWTFONO", nSize=0x2b7e50) returned 1 [0061.908] GetVersion () returned 0x1db10106 [0061.908] GetCommandLineW () returned="psexec hyBrDFjOidLuty.exe /accepteula -s -high " [0061.908] GetCommandLineW () returned="psexec hyBrDFjOidLuty.exe /accepteula -s -high " [0061.908] GetFullPathNameW (in: lpFileName="psexec", nBufferLength=0x2000, lpBuffer=0x861ac0, lpFilePart=0x2b7e54 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\psexec", lpFilePart=0x2b7e54*="psexec") returned 0x2c [0061.908] LoadLibraryW (lpLibFileName="Advapi32.dll") returned 0x77710000 [0061.909] GetProcAddress (hModule=0x77710000, lpProcName="CreateRestrictedToken") returned 0x77753148 [0061.909] GetCommandLineW () returned="psexec hyBrDFjOidLuty.exe /accepteula -s -high " [0061.909] GetComputerNameW (in: lpBuffer=0x83b380, nSize=0x2b7b80 | out: lpBuffer="XDUWTFONO", nSize=0x2b7b80) returned 1 [0061.909] LoadLibraryW (lpLibFileName="netapi32.dll") returned 0x75320000 [0061.909] GetProcAddress (hModule=0x75320000, lpProcName="NetIsServiceAccount") returned 0x750972d1 [0063.183] NetIsServiceAccount (in: ServerName=0x0, AccountName="", IsService=0x2b7e60 | out: IsService=0x2b7e60) returned 0xc0020012 [0063.202] LoadLibraryW (lpLibFileName="Advapi32.dll") returned 0x77710000 [0063.202] GetProcAddress (hModule=0x77710000, lpProcName="CreateProcessWithLogonW") returned 0x777552e9 [0063.202] GetLastError () returned 0x0 [0063.202] SetLastError (dwErrCode=0x0) [0063.202] GetLastError () returned 0x0 [0063.202] SetLastError (dwErrCode=0x0) [0063.202] GetCurrentProcess () returned 0xffffffff [0063.202] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x2b3c2c | out: TokenHandle=0x2b3c2c*=0xe4) returned 1 [0063.202] CreateProcessAsUserW (in: hToken=0xe4, lpApplicationName=0x0, lpCommandLine="\"hyBrDFjOidLuty.exe\" /accepteula -s -high ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x414, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2b3bd4*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2b3c18 | out: lpCommandLine="\"hyBrDFjOidLuty.exe\" /accepteula -s -high ", lpProcessInformation=0x2b3c18*(hProcess=0xec, hThread=0xe8, dwProcessId=0x7ac, dwThreadId=0x408)) returned 1 [0063.250] CloseHandle (hObject=0xe4) returned 1 [0063.250] ResumeThread (hThread=0xe8) returned 0x1 [0063.250] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) Thread: id = 9 os_tid = 0x484 Process: id = "4" image_name = "hybrdfjoidluty.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe" page_root = "0x415d3000" os_pid = "0x7ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xa94" cmd_line = "\"hyBrDFjOidLuty.exe\" /accepteula -s -high " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0x408 [0065.992] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0077.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x12e340, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0077.735] IsAppThemed () returned 0x1 [0077.738] CoTaskMemAlloc (cb=0xf0) returned 0xfc50d0 [0077.738] CreateActCtxA (pActCtx=0x12e910) returned 0xfa4ea8 [0077.800] CoTaskMemFree (pv=0xfc50d0) [0077.816] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16a [0077.816] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc16b [0077.832] GetUserNameW (in: lpBuffer=0x12e750, pcbBuffer=0x12ea78 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x12ea78) returned 1 [0078.381] GetComputerNameW (in: lpBuffer=0x12e750, nSize=0x12ea78 | out: lpBuffer="XDUWTFONO", nSize=0x12ea78) returned 1 [0078.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0078.411] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fef4130000 [0079.452] AdjustWindowRectEx (in: lpRect=0x12e9b0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x12e9b0) returned 1 [0079.457] GetCurrentProcess () returned 0xffffffffffffffff [0079.457] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x12e7c0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x12e7c0*=0x1e4) returned 1 [0079.480] GetCurrentActCtx (in: lphActCtx=0x12e6b0 | out: lphActCtx=0x12e6b0*=0x0) returned 1 [0079.480] ActivateActCtx (in: hActCtx=0xfa4ea8, lpCookie=0x12e6f0 | out: hActCtx=0xfa4ea8, lpCookie=0x12e6f0) returned 1 [0079.480] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0079.482] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefc4e0000 [0081.117] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77840000 [0081.117] GetProcAddress (hModule=0x77840000, lpProcName="DefWindowProcW") returned 0x77a8b0ac [0081.118] GetStockObject (i=5) returned 0x1900015 [0081.144] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0081.148] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0081.148] RegisterClassW (lpWndClass=0x12e390) returned 0xc16c [0081.149] CoTaskMemFree (pv=0x3b83a0) [0081.150] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0081.151] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x5015e [0081.161] SetWindowLongPtrW (hWnd=0x5015e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0081.166] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-4) returned 0x77a8b0ac [0081.322] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d7d8 | out: phkResult=0x12d7d8*=0x200) returned 0x0 [0081.324] RegQueryValueExW (in: hKey=0x200, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x12d828, lpData=0x0, lpcbData=0x12d820*=0x0 | out: lpType=0x12d828*=0x0, lpData=0x0, lpcbData=0x12d820*=0x0) returned 0x2 [0081.324] RegQueryValueExW (in: hKey=0x200, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x12d828, lpData=0x0, lpcbData=0x12d820*=0x0 | out: lpType=0x12d828*=0x0, lpData=0x0, lpcbData=0x12d820*=0x0) returned 0x2 [0081.325] RegCloseKey (hKey=0x200) returned 0x0 [0081.327] SetWindowLongPtrW (hWnd=0x5015e, nIndex=-4, dwNewLong=0x1ae8136c) returned 0x77a8b0ac [0081.327] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-4) returned 0x1ae8136c [0081.327] GetWindowLongPtrW (hWnd=0x5015e, nIndex=-16) returned 0x6c10000 [0081.331] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc16d [0081.333] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc16e [0081.334] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x81, wParam=0x0, lParam=0x12dd70) returned 0x1 [0081.334] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x83, wParam=0x0, lParam=0x12de20) returned 0x0 [0081.335] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x5015e, Msg=0x1, wParam=0x0, lParam=0x12dd70) returned 0x0 [0081.335] GetClientRect (in: hWnd=0x5015e, lpRect=0x12d830 | out: lpRect=0x12d830) returned 1 [0081.335] GetWindowRect (in: hWnd=0x5015e, lpRect=0x12d830 | out: lpRect=0x12d830) returned 1 [0081.340] GetParent (hWnd=0x5015e) returned 0x0 [0081.340] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001d73b00000001) returned 1 [0081.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4130000 [0081.526] AdjustWindowRectEx (in: lpRect=0x12e958, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e958) returned 1 [0081.559] CreateCompatibleDC (hdc=0x0) returned 0x16010997 [0081.757] GetSystemDefaultLCID () returned 0x409 [0081.757] GetStockObject (i=17) returned 0x18a0025 [0081.764] GetObjectW (in: h=0x18a0025, c=92, pv=0x12e440 | out: pv=0x12e440) returned 92 [0081.766] GetDC (hWnd=0x0) returned 0x370101ca [0081.878] GdiplusStartup (in: token=0x7fe93e26d08, input=0x12cd48, output=0x12cdf8 | out: token=0x7fe93e26d08, output=0x12cdf8) returned 0x0 [0081.888] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0081.888] GdipCreateFontFromLogfontW (hdc=0x370101ca, logfont=0x3b83a0, font=0x12e580) returned 0x0 [0083.416] CoTaskMemFree (pv=0x3b83a0) [0083.417] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.417] CoTaskMemFree (pv=0x3b83a0) [0083.417] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.418] CoTaskMemFree (pv=0x3b83a0) [0083.419] GdipGetFontUnit (font=0x1b4941a0, unit=0x12e4f0) returned 0x0 [0083.419] GdipGetFontSize (font=0x1b4941a0, size=0x12e4fc) returned 0x0 [0083.419] GdipGetFontStyle (font=0x1b4941a0, style=0x12e4e8) returned 0x0 [0083.423] GdipGetFamily (font=0x1b4941a0, family=0x12e4e0) returned 0x0 [0083.426] GdipGetFontSize (font=0x1b4941a0, size=0x26add00) returned 0x0 [0083.426] ReleaseDC (hWnd=0x0, hDC=0x370101ca) returned 1 [0083.429] GetDC (hWnd=0x0) returned 0x370101ca [0083.429] GdipCreateFromHDC (hdc=0x370101ca, graphics=0x12e4f8) returned 0x0 [0083.433] GdipGetDpiY (graphics=0x1af5d3c0, dpi=0x26aded8) returned 0x0 [0083.434] GdipGetFontHeight (font=0x1b4941a0, graphics=0x1af5d3c0, height=0x12e4f4) returned 0x0 [0083.436] GdipGetEmHeight (family=0x1b49c5e0, style=0, EmHeight=0x12e4f8) returned 0x0 [0083.437] GdipGetLineSpacing (family=0x1b49c5e0, style=0, LineSpacing=0x12e4f8) returned 0x0 [0083.438] GdipDeleteGraphics (graphics=0x1af5d3c0) returned 0x0 [0083.438] ReleaseDC (hWnd=0x0, hDC=0x370101ca) returned 1 [0083.476] GdipCreateFont (fontFamily=0x1b49c5e0, emSize=0x7fef12fcd25, style=0, unit=0x3, font=0x26ade68) returned 0x0 [0083.476] GdipGetFontSize (font=0x1afc3a40, size=0x26ade70) returned 0x0 [0083.476] GdipDeleteFont (font=0x1b4941a0) returned 0x0 [0083.482] GetDC (hWnd=0x0) returned 0x370101ca [0083.482] GdipCreateFromHDC (hdc=0x370101ca, graphics=0x12e5a8) returned 0x0 [0083.483] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.483] GdipGetLogFontW (font=0x1afc3a40, graphics=0x1af5d3c0, logfontW=0x3b83a0) returned 0x0 [0083.484] CoTaskMemFree (pv=0x3b83a0) [0083.484] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.484] CoTaskMemFree (pv=0x3b83a0) [0083.484] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.484] CoTaskMemFree (pv=0x3b83a0) [0083.484] GdipDeleteGraphics (graphics=0x1af5d3c0) returned 0x0 [0083.484] ReleaseDC (hWnd=0x0, hDC=0x370101ca) returned 1 [0083.485] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0083.485] CreateFontIndirectW (lplf=0x3b83a0) returned 0x350a09d8 [0083.486] CoTaskMemFree (pv=0x3b83a0) [0083.487] SelectObject (hdc=0x16010997, h=0x350a09d8) returned 0x18a002e [0083.488] GetTextMetricsW (in: hdc=0x16010997, lptm=0x12e828 | out: lptm=0x12e828) returned 1 [0083.489] GetTextExtentPoint32W (in: hdc=0x16010997, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x26ae250 | out: psizl=0x26ae250) returned 1 [0083.494] SelectObject (hdc=0x16010997, h=0x18a002e) returned 0x350a09d8 [0083.495] DeleteDC (hdc=0x16010997) returned 1 [0083.496] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4130000 [0083.496] AdjustWindowRectEx (in: lpRect=0x12e490, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e490) returned 1 [0083.496] AdjustWindowRectEx (in: lpRect=0x12e710, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e710) returned 1 [0083.497] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef4130000 [0083.497] AdjustWindowRectEx (in: lpRect=0x12e380, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e380) returned 1 [0083.497] AdjustWindowRectEx (in: lpRect=0x12e500, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e500) returned 1 [0083.504] GetSystemMetrics (nIndex=34) returned 132 [0083.504] GetSystemMetrics (nIndex=35) returned 38 [0083.507] GetCurrentActCtx (in: lphActCtx=0x12ea00 | out: lphActCtx=0x12ea00*=0x0) returned 1 [0083.507] ActivateActCtx (in: hActCtx=0xfa4ea8, lpCookie=0x12ea40 | out: hActCtx=0xfa4ea8, lpCookie=0x12ea40) returned 1 [0083.510] GetCurrentActCtx (in: lphActCtx=0x12e690 | out: lphActCtx=0x12e690*=0xfa4ea8) returned 1 [0083.510] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0083.510] AdjustWindowRectEx (in: lpRect=0x12e5b0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x12e5b0) returned 1 [0083.510] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0083.510] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=300, hWndParent=0x0, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2026a [0083.511] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0083.511] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-4) returned 0x77a8b0ac [0083.511] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-4, dwNewLong=0x1ae813bc) returned 0x77a8b0ac [0083.511] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-4) returned 0x1ae813bc [0083.511] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-16) returned 0x6cf0000 [0083.512] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x81, wParam=0x0, lParam=0x12dd50) returned 0x1 [0083.513] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x83, wParam=0x0, lParam=0x12de00) returned 0x0 [0083.906] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x1, wParam=0x0, lParam=0x12dd30) returned 0x0 [0083.906] GetClientRect (in: hWnd=0x2026a, lpRect=0x12d7b0 | out: lpRect=0x12d7b0) returned 1 [0083.906] GetWindowRect (in: hWnd=0x2026a, lpRect=0x12d7b0 | out: lpRect=0x12d7b0) returned 1 [0083.907] SetWindowTextW (hWnd=0x2026a, lpString="Form1") returned 1 [0083.907] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xc, wParam=0x0, lParam=0x26acff4) returned 0x1 [0083.931] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x26aea70, nLength=0xc, lpnLengthNeeded=0x12d540 | out: pvInfo=0x26aea70, lpnLengthNeeded=0x12d540) returned 1 [0083.934] SetConsoleCtrlHandler (HandlerRoutine=0x1ae8140c, Add=1) returned 1 [0083.936] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0083.936] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0083.939] GetClassInfoW (in: hInstance=0x1290000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x26aeb30 | out: lpWndClass=0x26aeb30) returned 0 [0083.940] CoTaskMemAlloc (cb=0x58) returned 0xfd0c60 [0083.940] RegisterClassW (lpWndClass=0x12d350) returned 0xc170 [0083.941] CoTaskMemFree (pv=0xfd0c60) [0083.942] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x20298 [0083.949] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x83, wParam=0x0, lParam=0x12cd70) returned 0x0 [0083.949] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x1, wParam=0x0, lParam=0x12cc60) returned 0x0 [0083.949] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0083.949] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0083.965] GetStartupInfoW (in: lpStartupInfo=0x26af268 | out: lpStartupInfo=0x26af268*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0083.965] GetParent (hWnd=0x2026a) returned 0x0 [0083.965] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-8, dwNewLong=0x0) returned 0x0 [0083.980] GetSystemMetrics (nIndex=11) returned 32 [0083.980] GetSystemMetrics (nIndex=12) returned 32 [0083.980] GetDC (hWnd=0x0) returned 0x370101ca [0083.981] GetDeviceCaps (hdc=0x370101ca, index=12) returned 32 [0083.981] GetDeviceCaps (hdc=0x370101ca, index=14) returned 1 [0083.981] ReleaseDC (hWnd=0x0, hDC=0x370101ca) returned 1 [0083.982] CreateIconFromResourceEx (presbits=0x26b1ec0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xc0121 [0083.983] GetSystemMetrics (nIndex=49) returned 16 [0083.983] GetSystemMetrics (nIndex=50) returned 16 [0083.986] CreateIconFromResourceEx (presbits=0x26b2fc8, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xc023b [0083.989] SendMessageW (hWnd=0x2026a, Msg=0x80, wParam=0x0, lParam=0xc023b) returned 0x0 [0083.989] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x80, wParam=0x0, lParam=0xc023b) returned 0x0 [0083.989] SendMessageW (hWnd=0x2026a, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0083.989] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0084.011] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xc023b [0084.016] GetSystemMenu (hWnd=0x2026a, bRevert=0) returned 0x30239 [0084.018] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12e698 | out: lpwndpl=0x12e698) returned 1 [0084.019] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0084.019] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0084.019] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0084.019] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0084.019] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0084.019] GetClientRect (in: hWnd=0x2026a, lpRect=0x12e760 | out: lpRect=0x12e760) returned 1 [0084.019] GetClientRect (in: hWnd=0x2026a, lpRect=0x12e690 | out: lpRect=0x12e690) returned 1 [0084.019] GetWindowRect (in: hWnd=0x2026a, lpRect=0x12e690 | out: lpRect=0x12e690) returned 1 [0084.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0084.020] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-16) returned 0x6cf0000 [0084.020] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.020] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.021] GetSystemMetrics (nIndex=42) returned 0 [0084.021] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12e4a0, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.022] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12e4a0) returned 0x5 [0084.022] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.022] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.022] GetSystemMetrics (nIndex=42) returned 0 [0084.022] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12e4a0, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.022] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12e4a0) returned 0x5 [0084.022] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-16) returned 0x6cf0000 [0084.022] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-20) returned 0x50100 [0084.022] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0084.023] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12e570) returned 0x0 [0084.023] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12e570) returned 0x0 [0084.023] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0084.024] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12e570) returned 0x0 [0084.024] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12e570) returned 0x0 [0084.024] SetWindowPos (hWnd=0x2026a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0084.024] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x46, wParam=0x0, lParam=0x12e5c0) returned 0x0 [0084.025] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x83, wParam=0x1, lParam=0x12e590) returned 0x0 [0084.025] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12e198 | out: lpwndpl=0x12e198) returned 1 [0084.025] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x47, wParam=0x0, lParam=0x12e5c0) returned 0x0 [0084.026] GetClientRect (in: hWnd=0x2026a, lpRect=0x12e030 | out: lpRect=0x12e030) returned 1 [0084.026] GetWindowRect (in: hWnd=0x2026a, lpRect=0x12e030 | out: lpRect=0x12e030) returned 1 [0084.028] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x83, wParam=0x1, lParam=0x12df20) returned 0x0 [0084.029] RedrawWindow (hWnd=0x2026a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.029] GetSystemMenu (hWnd=0x2026a, bRevert=0) returned 0x30239 [0084.029] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12e638 | out: lpwndpl=0x12e638) returned 1 [0084.029] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0084.029] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0084.029] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0084.029] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0084.029] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0084.029] ShowWindow (hWnd=0x2026a, nCmdShow=5) returned 0 [0084.029] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0084.031] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.031] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.031] GetSystemMetrics (nIndex=42) returned 0 [0084.031] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12e000, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.031] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12e000) returned 0x5 [0084.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0084.055] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-16) returned 0x6cf0000 [0084.056] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.056] GetSystemMetrics (nIndex=42) returned 0 [0084.056] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12dd20, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12dd20) returned 0x5 [0084.056] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.056] GetSystemMetrics (nIndex=42) returned 0 [0084.056] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12dd20, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.056] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12dd20) returned 0x5 [0084.056] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-16) returned 0x6cf0000 [0084.056] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-20) returned 0x50100 [0084.057] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-16, dwNewLong=0x12cf0000) returned 0x6cf0000 [0084.057] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12ddf0) returned 0x0 [0084.057] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12ddf0) returned 0x0 [0084.058] SetWindowLongPtrW (hWnd=0x2026a, nIndex=-20, dwNewLong=0xd0000) returned 0x50100 [0084.058] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12ddf0) returned 0x0 [0084.088] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12ddf0) returned 0x0 [0084.088] SetWindowPos (hWnd=0x2026a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0084.088] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x46, wParam=0x0, lParam=0x12de40) returned 0x0 [0084.088] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x83, wParam=0x1, lParam=0x12de10) returned 0x0 [0084.089] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12da18 | out: lpwndpl=0x12da18) returned 1 [0084.089] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x47, wParam=0x0, lParam=0x12de40) returned 0x0 [0084.089] GetClientRect (in: hWnd=0x2026a, lpRect=0x12d8b0 | out: lpRect=0x12d8b0) returned 1 [0084.089] GetWindowRect (in: hWnd=0x2026a, lpRect=0x12d8b0 | out: lpRect=0x12d8b0) returned 1 [0084.090] RedrawWindow (hWnd=0x2026a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.090] GetSystemMenu (hWnd=0x2026a, bRevert=0) returned 0x30239 [0084.090] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12deb8 | out: lpwndpl=0x12deb8) returned 1 [0084.090] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0084.090] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0084.090] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0084.090] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0084.090] EnableMenuItem (hMenu=0x30239, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0084.096] SetLayeredWindowAttributes (hwnd=0x2026a, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0084.111] GetCurrentThreadId () returned 0x408 [0084.117] EnumThreadWindows (dwThreadId=0x408, lpfn=0x1ae814ac, lParam=0x2026a) returned 1 [0084.186] GetWindowLongPtrW (hWnd=0x20298, nIndex=-8) returned 0x0 [0084.186] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-8) returned 0x0 [0084.186] GetWindowLongPtrW (hWnd=0x2029a, nIndex=-8) returned 0x2026a [0084.275] SetWindowLongPtrW (hWnd=0x2029a, nIndex=-8, dwNewLong=0x0) returned 0x2026a [0084.285] GetParent (hWnd=0x2026a) returned 0x0 [0084.285] GetWindowLongPtrW (hWnd=0x2026a, nIndex=-20) returned 0xd0100 [0084.286] DestroyWindow (hWnd=0x2026a) returned 1 [0084.286] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0084.286] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x46, wParam=0x0, lParam=0x12dca0) returned 0x0 [0084.303] GetWindowPlacement (in: hWnd=0x2026a, lpwndpl=0x12d878 | out: lpwndpl=0x12d878) returned 1 [0084.303] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x47, wParam=0x0, lParam=0x12dca0) returned 0x0 [0084.304] GetClientRect (in: hWnd=0x2026a, lpRect=0x12d710 | out: lpRect=0x12d710) returned 1 [0084.304] GetWindowRect (in: hWnd=0x2026a, lpRect=0x12d710 | out: lpRect=0x12d710) returned 1 [0084.311] GetWindowTextLengthW (hWnd=0x2026a) returned 5 [0084.311] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.311] GetSystemMetrics (nIndex=42) returned 0 [0084.311] GetWindowTextW (in: hWnd=0x2026a, lpString=0x12d580, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.311] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0xd, wParam=0x6, lParam=0x12d580) returned 0x5 [0084.312] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0084.312] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0084.324] GetCurrentActCtx (in: lphActCtx=0x12dd70 | out: lphActCtx=0x12dd70*=0xfa4ea8) returned 1 [0084.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0084.325] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0084.325] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Form1", dwStyle=0x2cf0000, X=200, Y=200, nWidth=300, nHeight=300, hWndParent=0x0, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2026c [0084.325] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0084.325] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-4) returned 0x77a8b0ac [0084.326] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-4, dwNewLong=0x1ae814fc) returned 0x77a8b0ac [0084.326] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-4) returned 0x1ae814fc [0084.326] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-16) returned 0x6cf0000 [0084.327] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x81, wParam=0x0, lParam=0x12d430) returned 0x1 [0084.327] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x83, wParam=0x0, lParam=0x12d4e0) returned 0x0 [0084.328] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1, wParam=0x0, lParam=0x12d410) returned 0x0 [0084.328] GetClientRect (in: hWnd=0x2026c, lpRect=0x12ce90 | out: lpRect=0x12ce90) returned 1 [0084.328] GetWindowRect (in: hWnd=0x2026c, lpRect=0x12ce90 | out: lpRect=0x12ce90) returned 1 [0084.328] SetWindowTextW (hWnd=0x2026c, lpString="Form1") returned 1 [0084.328] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xc, wParam=0x0, lParam=0x26b3d1c) returned 0x1 [0084.329] SetLayeredWindowAttributes (hwnd=0x2026c, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0084.333] GetStartupInfoW (in: lpStartupInfo=0x26b4208 | out: lpStartupInfo=0x26b4208*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0084.334] GetParent (hWnd=0x2026c) returned 0x0 [0084.337] GetStockObject (i=5) returned 0x1900015 [0084.338] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0084.339] CoTaskMemAlloc (cb=0x5c) returned 0x3b83a0 [0084.339] RegisterClassW (lpWndClass=0x12da60) returned 0xc171 [0084.339] CoTaskMemFree (pv=0x3b83a0) [0084.340] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0084.340] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2026e [0084.340] SetWindowLongPtrW (hWnd=0x2026e, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8154c [0084.340] GetWindowLongPtrW (hWnd=0x2026e, nIndex=-4) returned 0x77a8b0ac [0084.340] SetWindowLongPtrW (hWnd=0x2026e, nIndex=-4, dwNewLong=0x1ae8159c) returned 0x77a8b0ac [0084.341] GetWindowLongPtrW (hWnd=0x2026e, nIndex=-4) returned 0x1ae8159c [0084.341] GetWindowLongPtrW (hWnd=0x2026e, nIndex=-16) returned 0x4c00000 [0084.352] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x24, wParam=0x0, lParam=0x12d4d0) returned 0x0 [0084.352] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x81, wParam=0x0, lParam=0x12d440) returned 0x1 [0084.352] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x83, wParam=0x0, lParam=0x12d4f0) returned 0x0 [0084.352] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x1, wParam=0x0, lParam=0x12d440) returned 0x0 [0084.353] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-8, dwNewLong=0x2026e) returned 0x0 [0084.353] SendMessageW (hWnd=0x2026c, Msg=0x80, wParam=0x0, lParam=0xc023b) returned 0x0 [0084.353] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x80, wParam=0x0, lParam=0xc023b) returned 0x0 [0084.353] SendMessageW (hWnd=0x2026c, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0084.353] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0084.354] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xc023b [0084.355] GetSystemMenu (hWnd=0x2026c, bRevert=0) returned 0x40239 [0084.355] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12dd78 | out: lpwndpl=0x12dd78) returned 1 [0084.355] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0084.355] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0084.355] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0084.355] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0084.355] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0084.355] GetClientRect (in: hWnd=0x2026c, lpRect=0x12de40 | out: lpRect=0x12de40) returned 1 [0084.355] GetClientRect (in: hWnd=0x2026c, lpRect=0x12dd70 | out: lpRect=0x12dd70) returned 1 [0084.355] GetWindowRect (in: hWnd=0x2026c, lpRect=0x12dd70 | out: lpRect=0x12dd70) returned 1 [0084.356] SetWindowPos (hWnd=0x2026c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0084.356] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x46, wParam=0x0, lParam=0x12dcd0) returned 0x0 [0084.365] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.368] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12d8c8 | out: lpwndpl=0x12d8c8) returned 1 [0084.368] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d7e0 | out: lpRect=0x12d7e0) returned 1 [0084.368] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0084.369] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.369] GetSystemMetrics (nIndex=42) returned 0 [0084.369] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12d550, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.369] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12d550) returned 0x5 [0084.369] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d5c8 | out: lpRect=0x12d5c8) returned 1 [0084.377] GetSysColor (nIndex=10) returned 0xb4b4b4 [0084.377] GetSysColor (nIndex=2) returned 0xd1b499 [0084.378] GetSysColor (nIndex=9) returned 0x0 [0084.378] GetSysColor (nIndex=12) returned 0xababab [0084.378] GetSysColor (nIndex=15) returned 0xf0f0f0 [0084.378] GetSysColor (nIndex=20) returned 0xffffff [0084.378] GetSysColor (nIndex=16) returned 0xa0a0a0 [0084.378] GetSysColor (nIndex=15) returned 0xf0f0f0 [0084.378] GetSysColor (nIndex=16) returned 0xa0a0a0 [0084.379] GetSysColor (nIndex=21) returned 0x696969 [0084.379] GetSysColor (nIndex=22) returned 0xe3e3e3 [0084.379] GetSysColor (nIndex=20) returned 0xffffff [0084.379] GetSysColor (nIndex=18) returned 0x0 [0084.379] GetSysColor (nIndex=1) returned 0x0 [0084.379] GetSysColor (nIndex=27) returned 0xead1b9 [0084.380] GetSysColor (nIndex=28) returned 0xf2e4d7 [0084.380] GetSysColor (nIndex=17) returned 0x6d6d6d [0084.380] GetSysColor (nIndex=13) returned 0xff9933 [0084.380] GetSysColor (nIndex=14) returned 0xffffff [0084.380] GetSysColor (nIndex=26) returned 0xcc6600 [0084.380] GetSysColor (nIndex=11) returned 0xfcf7f4 [0084.380] GetSysColor (nIndex=3) returned 0xdbcdbf [0084.381] GetSysColor (nIndex=19) returned 0x544e43 [0084.381] GetSysColor (nIndex=24) returned 0xe1ffff [0084.381] GetSysColor (nIndex=23) returned 0x0 [0084.381] GetSysColor (nIndex=4) returned 0xf0f0f0 [0084.381] GetSysColor (nIndex=30) returned 0xf0f0f0 [0084.381] GetSysColor (nIndex=29) returned 0xff9933 [0084.381] GetSysColor (nIndex=7) returned 0x0 [0084.381] GetSysColor (nIndex=0) returned 0xc8c8c8 [0084.382] GetSysColor (nIndex=5) returned 0xffffff [0084.382] GetSysColor (nIndex=6) returned 0x646464 [0084.382] GetSysColor (nIndex=8) returned 0x0 [0084.385] GetSystemMetrics (nIndex=80) returned 1 [0084.388] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1ae815ec, dwData=0x0) returned 1 [0084.389] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x12cdc0 | out: lpmi=0x12cdc0) returned 1 [0084.392] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x7f0101b1 [0084.392] GetDeviceCaps (hdc=0x7f0101b1, index=12) returned 32 [0084.392] GetDeviceCaps (hdc=0x7f0101b1, index=14) returned 1 [0084.392] DeleteDC (hdc=0x7f0101b1) returned 1 [0084.398] GetCurrentObject (hdc=0x370101ca, type=0x1) returned 0x1b00017 [0084.398] GetCurrentObject (hdc=0x370101ca, type=0x2) returned 0x1900010 [0084.398] GetCurrentObject (hdc=0x370101ca, type=0x7) returned 0xd0509c0 [0084.399] GetCurrentObject (hdc=0x370101ca, type=0x6) returned 0x18a002e [0084.406] SaveDC (hdc=0x370101ca) returned 1 [0084.408] GetNearestColor (hdc=0x370101ca, color=0xf0f0f0) returned 0xf0f0f0 [0084.413] CreateSolidBrush (color=0xf0f0f0) returned 0x111009ab [0084.414] FillRect (hDC=0x370101ca, lprc=0x12d2b8, hbr=0x111009ab) returned 1 [0084.416] DeleteObject (ho=0x111009ab) returned 1 [0084.418] RestoreDC (hdc=0x370101ca, nSavedDC=-1) returned 1 [0084.423] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12d8a8 | out: lpwndpl=0x12d8a8) returned 1 [0084.424] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x47, wParam=0x0, lParam=0x12dcd0) returned 0x0 [0084.424] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d740 | out: lpRect=0x12d740) returned 1 [0084.424] GetWindowRect (in: hWnd=0x2026c, lpRect=0x12d740 | out: lpRect=0x12d740) returned 1 [0084.424] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x83, wParam=0x1, lParam=0x12d630) returned 0x0 [0084.437] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.443] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12d258 | out: lpwndpl=0x12d258) returned 1 [0084.443] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d170 | out: lpRect=0x12d170) returned 1 [0084.443] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0084.443] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.444] GetSystemMetrics (nIndex=42) returned 0 [0084.444] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12cee0, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.444] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12cee0) returned 0x5 [0084.444] GetClientRect (in: hWnd=0x2026c, lpRect=0x12cf58 | out: lpRect=0x12cf58) returned 1 [0084.444] GetCurrentObject (hdc=0x370101ca, type=0x1) returned 0x1b00017 [0084.444] GetCurrentObject (hdc=0x370101ca, type=0x2) returned 0x1900010 [0084.444] GetCurrentObject (hdc=0x370101ca, type=0x7) returned 0xd0509c0 [0084.444] GetCurrentObject (hdc=0x370101ca, type=0x6) returned 0x18a002e [0084.444] SaveDC (hdc=0x370101ca) returned 1 [0084.445] GetNearestColor (hdc=0x370101ca, color=0xf0f0f0) returned 0xf0f0f0 [0084.445] CreateSolidBrush (color=0xf0f0f0) returned 0x121009ab [0084.445] FillRect (hDC=0x370101ca, lprc=0x12cc48, hbr=0x121009ab) returned 1 [0084.445] DeleteObject (ho=0x121009ab) returned 1 [0084.445] RestoreDC (hdc=0x370101ca, nSavedDC=-1) returned 1 [0084.446] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-8, dwNewLong=0x2026e) returned 0x2026e [0084.447] SendMessageW (hWnd=0x2026e, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0084.447] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x80, wParam=0x1, lParam=0xc0121) returned 0x0 [0084.448] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0xd, wParam=0x104, lParam=0x1ada48b0) returned 0x0 [0084.448] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0xd, wParam=0x104, lParam=0x1ada48b0) returned 0x0 [0084.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0084.449] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-16) returned 0x16cf0000 [0084.449] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0084.449] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.449] GetSystemMetrics (nIndex=42) returned 0 [0084.449] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12db80, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.449] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12db80) returned 0x5 [0084.449] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0084.449] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.449] GetSystemMetrics (nIndex=42) returned 0 [0084.450] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12db80, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.450] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12db80) returned 0x5 [0084.450] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-16) returned 0x16cf0000 [0084.450] GetWindowLongPtrW (hWnd=0x2026c, nIndex=-20) returned 0x90100 [0084.450] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-16, dwNewLong=0x12cf0000) returned 0x16cf0000 [0084.450] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x12dc50) returned 0x0 [0084.450] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x12dc50) returned 0x0 [0084.451] SetWindowLongPtrW (hWnd=0x2026c, nIndex=-20, dwNewLong=0x90000) returned 0x90100 [0084.451] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x12dc50) returned 0x0 [0084.451] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x12dc50) returned 0x0 [0084.451] SetWindowPos (hWnd=0x2026c, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0084.451] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x46, wParam=0x0, lParam=0x12dca0) returned 0x0 [0084.452] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x83, wParam=0x1, lParam=0x12dc70) returned 0x0 [0084.461] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.467] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12d898 | out: lpwndpl=0x12d898) returned 1 [0084.468] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d7b0 | out: lpRect=0x12d7b0) returned 1 [0084.468] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0084.468] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.468] GetSystemMetrics (nIndex=42) returned 0 [0084.468] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12d520, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.468] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12d520) returned 0x5 [0084.468] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d598 | out: lpRect=0x12d598) returned 1 [0084.468] GetCurrentObject (hdc=0x20109b2, type=0x1) returned 0x1b00017 [0084.468] GetCurrentObject (hdc=0x20109b2, type=0x2) returned 0x1900010 [0084.469] GetCurrentObject (hdc=0x20109b2, type=0x7) returned 0xd0509c0 [0084.469] GetCurrentObject (hdc=0x20109b2, type=0x6) returned 0x18a002e [0084.469] SaveDC (hdc=0x20109b2) returned 1 [0084.469] GetNearestColor (hdc=0x20109b2, color=0xf0f0f0) returned 0xf0f0f0 [0084.469] CreateSolidBrush (color=0xf0f0f0) returned 0x131009ab [0084.469] FillRect (hDC=0x20109b2, lprc=0x12d288, hbr=0x131009ab) returned 1 [0084.469] DeleteObject (ho=0x131009ab) returned 1 [0084.470] RestoreDC (hdc=0x20109b2, nSavedDC=-1) returned 1 [0084.471] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12d878 | out: lpwndpl=0x12d878) returned 1 [0084.471] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x47, wParam=0x0, lParam=0x12dca0) returned 0x0 [0084.471] GetClientRect (in: hWnd=0x2026c, lpRect=0x12d710 | out: lpRect=0x12d710) returned 1 [0084.471] GetWindowRect (in: hWnd=0x2026c, lpRect=0x12d710 | out: lpRect=0x12d710) returned 1 [0084.472] RedrawWindow (hWnd=0x2026c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.472] GetSystemMenu (hWnd=0x2026c, bRevert=0) returned 0x40239 [0084.472] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12dd18 | out: lpwndpl=0x12dd18) returned 1 [0084.472] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0084.472] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0084.472] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0084.472] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0084.472] EnableMenuItem (hMenu=0x40239, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0084.472] SetWindowLongPtrW (hWnd=0x2029a, nIndex=-8, dwNewLong=0x2026c) returned 0x20298 [0084.586] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x12d140 | out: lpLuid=0x12d140*(LowPart=0x14, HighPart=0)) returned 1 [0084.587] GetCurrentProcess () returned 0xffffffffffffffff [0084.588] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x12d138 | out: TokenHandle=0x12d138*=0x21c) returned 1 [0084.589] AdjustTokenPrivileges (in: TokenHandle=0x21c, DisableAllPrivileges=0, NewState=0x26b6318*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0084.589] CloseHandle (hObject=0x21c) returned 1 [0084.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12e030 | out: SystemInformation=0x126b1930, ResultLength=0x12e030*=0x118a0) returned 0x0 [0084.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x118a0) returned 0x0 [0084.653] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x454) returned 0x21c [0084.660] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0084.728] CloseHandle (hObject=0x21c) returned 1 [0084.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10ef0) returned 0x0 [0084.736] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x454) returned 0x21c [0084.736] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0084.737] CloseHandle (hObject=0x21c) returned 1 [0084.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10ef0) returned 0x0 [0084.741] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x454) returned 0x21c [0084.741] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0084.741] CloseHandle (hObject=0x21c) returned 1 [0084.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10ef0) returned 0x0 [0084.745] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x454) returned 0x21c [0084.745] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0084.746] CloseHandle (hObject=0x21c) returned 1 [0084.746] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10ef0) returned 0x0 [0084.826] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x454) returned 0x21c [0084.826] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 0 [0084.960] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0x12dcb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0086.370] CloseHandle (hObject=0x21c) returned 1 [0086.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x115a8) returned 0x0 [0086.404] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x8dc) returned 0x21c [0086.404] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.429] CloseHandle (hObject=0x21c) returned 1 [0086.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.435] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x8dc) returned 0x21c [0086.435] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.436] CloseHandle (hObject=0x21c) returned 1 [0086.436] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.453] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x8dc) returned 0x21c [0086.453] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.453] CloseHandle (hObject=0x21c) returned 1 [0086.454] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.458] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x8dc) returned 0x21c [0086.458] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.459] CloseHandle (hObject=0x21c) returned 1 [0086.459] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.599] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x8dc) returned 0x21c [0086.599] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 0 [0086.600] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0x12dcb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0086.601] CloseHandle (hObject=0x21c) returned 1 [0086.601] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x11148) returned 0x0 [0086.611] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.612] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.613] CloseHandle (hObject=0x21c) returned 1 [0086.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.614] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.614] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.615] CloseHandle (hObject=0x21c) returned 1 [0086.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.616] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.616] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.616] CloseHandle (hObject=0x21c) returned 1 [0086.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.617] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.617] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.617] CloseHandle (hObject=0x21c) returned 1 [0086.617] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.618] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.618] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.618] CloseHandle (hObject=0x21c) returned 1 [0086.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.619] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.619] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.619] CloseHandle (hObject=0x21c) returned 1 [0086.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.620] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.620] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.620] CloseHandle (hObject=0x21c) returned 1 [0086.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.621] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.621] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.621] CloseHandle (hObject=0x21c) returned 1 [0086.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.622] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.622] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.623] CloseHandle (hObject=0x21c) returned 1 [0086.623] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.623] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.623] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.623] CloseHandle (hObject=0x21c) returned 1 [0086.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.628] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.628] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 1 [0086.629] CloseHandle (hObject=0x21c) returned 1 [0086.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x110f8) returned 0x0 [0086.633] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xad4) returned 0x21c [0086.633] TerminateProcess (hProcess=0x21c, uExitCode=0xffffffff) returned 0 [0086.644] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x0, lpBuffer=0x12dcb0, nSize=0x101, Arguments=0x0 | out: lpBuffer="Access is denied.\r\n") returned 0x13 [0086.645] CloseHandle (hObject=0x21c) returned 1 [0086.646] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x126b1930, Length=0x20000, ResultLength=0x12dfe0 | out: SystemInformation=0x126b1930, ResultLength=0x12dfe0*=0x10f88) returned 0x0 [0086.800] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x12de80, nSize=0x80 | out: lpBuffer="C:\\Windows") returned 0xa [0090.874] ShellExecuteExW (in: pExecInfo=0x28201a8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Windows\\explorer.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x28201a8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Windows\\explorer.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x310)) returned 1 [0096.507] LocalFree (hMem=0xfda660) returned 0x0 [0106.841] GetLogicalDrives () returned 0x4 [0114.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12df70) returned 1 [0114.788] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12da60, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0114.789] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12da00, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0114.794] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x12dc10 | out: lpFindFileData=0x12dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0xfd1500 [0114.796] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0114.796] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0114.797] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xf5ab9ca0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0114.798] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0114.798] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe3662ba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe3662ba0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0114.798] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0114.798] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0114.799] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0114.799] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0114.799] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0114.799] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0114.799] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0114.800] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dec0) returned 1 [0114.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de80) returned 1 [0114.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12df70) returned 1 [0114.800] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12da60, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0114.800] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x12da00, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0114.800] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x12dc10 | out: lpFindFileData=0x12dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0xfd1500 [0114.804] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0114.804] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xf5ab9ca0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0114.805] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe3662ba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe3662ba0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0114.806] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0114.806] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0114.806] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0114.806] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0114.807] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dc60 | out: lpFindFileData=0x12dc60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.807] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dec0) returned 1 [0114.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de80) returned 1 [0114.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0114.820] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0114.821] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0114.821] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.821] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.822] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0114.822] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0114.823] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0114.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0114.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0114.823] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0114.823] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0114.823] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.824] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0114.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.825] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0114.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0114.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.825] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0114.825] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0114.826] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0114.827] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.827] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.827] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0114.827] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0114.828] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.828] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.828] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0114.829] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0114.829] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.886] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0114.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.887] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.890] GetFileType (hFile=0x320) returned 0x1 [0114.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.890] GetFileType (hFile=0x320) returned 0x1 [0114.918] WriteFile (in: hFile=0x320, lpBuffer=0x282cb70*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x282cb70*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.920] CloseHandle (hObject=0x320) returned 1 [0114.921] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1d [0114.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0114.921] CreateFileW (lpFileName="C:\\$Recycle.Bin\\SYMMYWARE.TXT" (normalized: "c:\\$recycle.bin\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.926] GetFileType (hFile=0x320) returned 0x1 [0114.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0114.926] GetFileType (hFile=0x320) returned 0x1 [0114.927] WriteFile (in: hFile=0x320, lpBuffer=0x282fd98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dde8, lpOverlapped=0x0 | out: lpBuffer=0x282fd98*, lpNumberOfBytesWritten=0x12dde8*=0x4aa, lpOverlapped=0x0) returned 1 [0114.928] CloseHandle (hObject=0x320) returned 1 [0114.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0114.928] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0114.928] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0114.929] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.929] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.929] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0114.929] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0114.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0114.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0114.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0114.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0114.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0114.931] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0114.931] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0114.931] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0114.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0114.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0114.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0114.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0114.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0114.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0114.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0114.934] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0114.934] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0114.934] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0114.935] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0114.935] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0114.935] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0114.936] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0114.936] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0114.937] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0114.937] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0114.937] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0114.938] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0114.938] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0114.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0114.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0114.939] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.939] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.940] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0114.940] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0114.940] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0114.940] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0114.941] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0114.942] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0114.942] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0114.942] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0114.943] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0114.943] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.943] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0114.943] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0114.943] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0114.944] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0114.945] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0114.946] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0114.946] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0114.946] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0114.947] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0114.947] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0114.947] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.947] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0114.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0114.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.947] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0114.947] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0114.948] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.950] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.950] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.950] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.950] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.950] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0114.950] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0114.951] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.951] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.951] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.951] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.951] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.952] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.952] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\SYMMYWARE.TXT" (normalized: "c:\\boot\\cs-cz\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.952] GetFileType (hFile=0x320) returned 0x1 [0114.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.952] GetFileType (hFile=0x320) returned 0x1 [0114.953] WriteFile (in: hFile=0x320, lpBuffer=0x2839948*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2839948*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.955] CloseHandle (hObject=0x320) returned 1 [0114.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.955] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0114.955] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0114.955] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.956] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.957] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.957] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.957] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.957] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0114.957] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0114.957] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.958] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.958] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.958] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.958] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.959] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.959] CreateFileW (lpFileName="C:\\Boot\\da-DK\\SYMMYWARE.TXT" (normalized: "c:\\boot\\da-dk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.959] GetFileType (hFile=0x320) returned 0x1 [0114.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.959] GetFileType (hFile=0x320) returned 0x1 [0114.960] WriteFile (in: hFile=0x320, lpBuffer=0x283e448*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x283e448*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.961] CloseHandle (hObject=0x320) returned 1 [0114.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.961] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0114.961] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0114.961] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.963] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.964] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.964] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.964] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.964] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0114.964] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0114.965] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.965] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.965] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.967] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.967] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.967] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.967] CreateFileW (lpFileName="C:\\Boot\\de-DE\\SYMMYWARE.TXT" (normalized: "c:\\boot\\de-de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.968] GetFileType (hFile=0x320) returned 0x1 [0114.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.968] GetFileType (hFile=0x320) returned 0x1 [0114.969] WriteFile (in: hFile=0x320, lpBuffer=0x2842f48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2842f48*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.970] CloseHandle (hObject=0x320) returned 1 [0114.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.970] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0114.970] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0114.970] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.971] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.971] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.971] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.971] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.972] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0114.972] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0114.972] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.972] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.972] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.973] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.973] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.973] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.973] CreateFileW (lpFileName="C:\\Boot\\el-GR\\SYMMYWARE.TXT" (normalized: "c:\\boot\\el-gr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.973] GetFileType (hFile=0x320) returned 0x1 [0114.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.974] GetFileType (hFile=0x320) returned 0x1 [0114.974] WriteFile (in: hFile=0x320, lpBuffer=0x2847a48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2847a48*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.976] CloseHandle (hObject=0x320) returned 1 [0114.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.976] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0114.977] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0114.977] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.979] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.979] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0114.980] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0114.980] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0114.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0114.981] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.981] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.981] CreateFileW (lpFileName="C:\\Boot\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\boot\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.981] GetFileType (hFile=0x320) returned 0x1 [0114.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.982] GetFileType (hFile=0x320) returned 0x1 [0114.982] WriteFile (in: hFile=0x320, lpBuffer=0x284c858*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x284c858*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.983] CloseHandle (hObject=0x320) returned 1 [0114.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.984] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0114.984] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0114.984] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.986] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.986] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.987] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.987] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.987] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0114.987] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0114.987] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.987] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.988] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.988] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.988] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.988] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.988] CreateFileW (lpFileName="C:\\Boot\\es-ES\\SYMMYWARE.TXT" (normalized: "c:\\boot\\es-es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.989] GetFileType (hFile=0x320) returned 0x1 [0114.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.989] GetFileType (hFile=0x320) returned 0x1 [0114.989] WriteFile (in: hFile=0x320, lpBuffer=0x2851358*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2851358*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.990] CloseHandle (hObject=0x320) returned 1 [0114.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.991] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0114.991] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0114.991] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.991] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.991] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.991] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.992] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.992] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0114.992] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0114.992] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0114.993] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.993] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0114.993] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0114.993] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0114.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0114.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0114.994] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0114.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0114.994] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\SYMMYWARE.TXT" (normalized: "c:\\boot\\fi-fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0114.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0114.995] WriteFile (in: hFile=0x320, lpBuffer=0x2855e58*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2855e58*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0114.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0114.998] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0114.998] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0114.998] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0115.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0115.001] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.001] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.001] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0115.001] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0115.001] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.001] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.001] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0115.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0115.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0115.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0115.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0115.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0115.002] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.003] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.003] CreateFileW (lpFileName="C:\\Boot\\Fonts\\SYMMYWARE.TXT" (normalized: "c:\\boot\\fonts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.006] WriteFile (in: hFile=0x320, lpBuffer=0x285b390*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x285b390*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0115.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.008] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0115.008] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0115.008] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.017] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.017] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0115.017] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0115.017] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.018] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.018] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.018] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.018] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.018] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.018] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\SYMMYWARE.TXT" (normalized: "c:\\boot\\fr-fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.019] WriteFile (in: hFile=0x320, lpBuffer=0x285fe90*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x285fe90*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0115.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.021] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0115.021] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0115.021] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.022] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.022] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0115.022] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0115.022] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.022] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.022] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.023] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.023] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.023] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.023] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\SYMMYWARE.TXT" (normalized: "c:\\boot\\hu-hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.024] WriteFile (in: hFile=0x320, lpBuffer=0x2864990*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2864990*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0115.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.025] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0115.025] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0115.025] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.028] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.029] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.029] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0115.029] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0115.029] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.030] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.030] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.031] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.031] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.031] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.031] CreateFileW (lpFileName="C:\\Boot\\it-IT\\SYMMYWARE.TXT" (normalized: "c:\\boot\\it-it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.033] WriteFile (in: hFile=0x320, lpBuffer=0x2869490*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2869490*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0115.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.034] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0115.034] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0115.035] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.035] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.036] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.036] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.038] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.038] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0115.038] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0115.038] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.038] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.039] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.040] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.040] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.040] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.041] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\SYMMYWARE.TXT" (normalized: "c:\\boot\\ja-jp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.044] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0115.044] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0115.044] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.049] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.050] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0115.050] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0115.050] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.050] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.050] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.051] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\SYMMYWARE.TXT" (normalized: "c:\\boot\\ko-kr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.052] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0115.052] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0115.052] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.053] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.053] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0115.053] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0115.053] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.053] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.054] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.054] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\SYMMYWARE.TXT" (normalized: "c:\\boot\\nb-no\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.055] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0115.055] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0115.056] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.058] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.058] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.058] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.058] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.058] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0115.058] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0115.058] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.059] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.059] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.059] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.059] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.059] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.059] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\SYMMYWARE.TXT" (normalized: "c:\\boot\\nl-nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.060] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0115.060] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0115.060] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.061] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.061] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0115.061] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0115.061] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.062] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.062] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.062] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.062] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.062] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\SYMMYWARE.TXT" (normalized: "c:\\boot\\pl-pl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.063] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0115.063] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0115.063] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.072] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.072] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.072] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.072] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.073] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0115.073] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0115.073] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.073] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.073] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.073] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.073] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.073] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.073] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\SYMMYWARE.TXT" (normalized: "c:\\boot\\pt-br\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.075] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0115.075] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0115.075] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.076] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.076] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.076] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.076] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.076] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0115.076] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0115.076] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.076] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.076] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.077] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.077] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.077] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.077] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\SYMMYWARE.TXT" (normalized: "c:\\boot\\pt-pt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.079] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0115.079] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0115.079] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.081] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.081] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.081] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.081] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.082] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0115.082] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0115.082] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.082] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.082] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.082] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.083] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.083] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.083] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\SYMMYWARE.TXT" (normalized: "c:\\boot\\ru-ru\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.085] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0115.085] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0115.086] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.089] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.089] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.089] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.089] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.090] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0115.090] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0115.090] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.090] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.091] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.091] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.091] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.091] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.092] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\SYMMYWARE.TXT" (normalized: "c:\\boot\\sv-se\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.094] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0115.094] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0115.094] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.107] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.107] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.107] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.107] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0115.107] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0115.107] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.108] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.108] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.108] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.109] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.109] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.109] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\SYMMYWARE.TXT" (normalized: "c:\\boot\\tr-tr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0115.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0115.112] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.112] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.112] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.112] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.112] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.113] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0115.113] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0115.113] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.113] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.113] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.113] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.113] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.114] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.114] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\SYMMYWARE.TXT" (normalized: "c:\\boot\\zh-cn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0115.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0115.116] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.120] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.120] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.120] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.120] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0115.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0115.120] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.121] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.121] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.121] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.121] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.121] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\SYMMYWARE.TXT" (normalized: "c:\\boot\\zh-hk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0115.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0115.124] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.124] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.125] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.125] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.125] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0115.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0115.126] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.126] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.127] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0115.127] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0115.127] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.128] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0115.128] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\SYMMYWARE.TXT" (normalized: "c:\\boot\\zh-tw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0115.131] GetFullPathNameW (in: lpFileName="C:\\Boot\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x15 [0115.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0115.131] CreateFileW (lpFileName="C:\\Boot\\SYMMYWARE.TXT" (normalized: "c:\\boot\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0115.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0115.134] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0115.134] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0115.134] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.134] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.135] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.135] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0115.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0115.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0115.138] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0115.138] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0115.139] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.139] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0115.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0115.140] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1b [0115.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0115.140] CreateFileW (lpFileName="C:\\Config.Msi\\SYMMYWARE.TXT" (normalized: "c:\\config.msi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x320 [0115.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0115.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0115.142] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0115.142] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0115.142] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0115.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de20) returned 1 [0115.186] EtwEventRegister (in: ProviderId=0x28b2568, EnableCallback=0x1ae813bc, CallbackContext=0x0, RegHandle=0x28b2548 | out: RegHandle=0x28b2548) returned 0x0 [0115.267] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0115.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0115.267] CreateFileW (lpFileName="C:\\Documents and Settings\\SYMMYWARE.TXT" (normalized: "c:\\documents and settings\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0115.274] GetFileType (hFile=0x31c) returned 0x1 [0115.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0115.274] GetFileType (hFile=0x31c) returned 0x1 [0115.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0115.276] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0115.277] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0115.277] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.278] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.278] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0115.279] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0115.279] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0115.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0115.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0115.280] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0115.280] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0115.280] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.282] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.283] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0115.284] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.284] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0115.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0115.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0115.286] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0115.286] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.290] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.293] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0115.294] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0115.294] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0115.295] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0115.295] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0115.296] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0115.297] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0115.297] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0115.298] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0115.298] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0115.298] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0115.299] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0115.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0115.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0115.301] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0115.302] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0115.302] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0115.303] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0115.303] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0115.305] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0115.306] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0115.306] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.307] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.307] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0115.308] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0115.308] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0115.308] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0115.309] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0115.309] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0115.309] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0115.309] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0115.310] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0115.310] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0115.311] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0115.312] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0115.312] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0115.312] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0115.312] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0115.313] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0115.313] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0115.313] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.313] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0115.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0115.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0115.315] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0115.315] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0115.315] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.318] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.319] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0115.319] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0115.319] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0115.319] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0115.319] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.320] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0115.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0115.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0115.320] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0115.320] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0115.320] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0115.321] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.321] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0115.321] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0115.322] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0115.322] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0115.323] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0115.323] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0115.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0115.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0115.367] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0115.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0115.367] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x31c [0115.368] GetFileType (hFile=0x31c) returned 0x1 [0115.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0115.368] GetFileType (hFile=0x31c) returned 0x1 [0115.368] GetFileSize (in: hFile=0x31c, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x61d [0115.369] ReadFile (in: hFile=0x31c, lpBuffer=0x28c27b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28c27b0*, lpNumberOfBytesRead=0x12dd38*=0x61d, lpOverlapped=0x0) returned 1 [0115.376] CloseHandle (hObject=0x31c) returned 1 [0115.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0115.394] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0115.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db60) returned 1 [0115.395] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12dc40 | out: lpFileInformation=0x12dc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0115.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.195] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x12dd80 | out: pfEnabled=0x12dd80) returned 0x0 [0116.446] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0116.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.446] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.447] GetFileType (hFile=0x310) returned 0x1 [0116.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.447] GetFileType (hFile=0x310) returned 0x1 [0116.447] WriteFile (in: hFile=0x310, lpBuffer=0x2754c58*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2754c58*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.449] CloseHandle (hObject=0x310) returned 1 [0116.455] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0116.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.455] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.456] GetFileType (hFile=0x310) returned 0x1 [0116.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.456] GetFileType (hFile=0x310) returned 0x1 [0116.456] WriteFile (in: hFile=0x310, lpBuffer=0x2755de0*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2755de0*, lpNumberOfBytesWritten=0x12dc48*=0x620, lpOverlapped=0x0) returned 1 [0116.458] CloseHandle (hObject=0x310) returned 1 [0116.459] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0116.459] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0116.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.459] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9bba6a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0116.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.460] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.symmyware")) returned 1 [0116.465] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.465] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.466] GetFileType (hFile=0x310) returned 0x1 [0116.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.466] GetFileType (hFile=0x310) returned 0x1 [0116.466] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x8f8 [0116.466] ReadFile (in: hFile=0x310, lpBuffer=0x2757ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2757ad8*, lpNumberOfBytesRead=0x12dd38*=0x8f8, lpOverlapped=0x0) returned 1 [0116.468] CloseHandle (hObject=0x310) returned 1 [0116.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.536] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.538] GetFileType (hFile=0x310) returned 0x1 [0116.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.538] GetFileType (hFile=0x310) returned 0x1 [0116.538] WriteFile (in: hFile=0x310, lpBuffer=0x27abed8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27abed8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.539] CloseHandle (hObject=0x310) returned 1 [0116.540] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.541] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.542] GetFileType (hFile=0x310) returned 0x1 [0116.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.542] GetFileType (hFile=0x310) returned 0x1 [0116.542] WriteFile (in: hFile=0x310, lpBuffer=0x27ad058*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x27ad058*, lpNumberOfBytesWritten=0x12dc48*=0x900, lpOverlapped=0x0) returned 1 [0116.544] CloseHandle (hObject=0x310) returned 1 [0116.546] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.546] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0116.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.546] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9c850d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0116.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.547] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0116.548] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0116.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0116.548] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.548] GetFileType (hFile=0x310) returned 0x1 [0116.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0116.549] GetFileType (hFile=0x310) returned 0x1 [0116.550] WriteFile (in: hFile=0x310, lpBuffer=0x27b0518*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27b0518*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0116.552] CloseHandle (hObject=0x310) returned 1 [0116.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.552] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.552] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.553] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.583] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.583] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0116.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0116.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0116.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.585] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.586] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.586] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.586] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.587] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0116.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0116.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0116.589] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.589] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0116.589] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.590] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0116.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.590] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.591] GetFileType (hFile=0x310) returned 0x1 [0116.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.592] GetFileType (hFile=0x310) returned 0x1 [0116.592] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5aa [0116.592] ReadFile (in: hFile=0x310, lpBuffer=0x27b4db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27b4db0*, lpNumberOfBytesRead=0x12dd38*=0x5aa, lpOverlapped=0x0) returned 1 [0116.594] CloseHandle (hObject=0x310) returned 1 [0116.607] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0116.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.607] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.609] GetFileType (hFile=0x310) returned 0x1 [0116.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.609] GetFileType (hFile=0x310) returned 0x1 [0116.609] WriteFile (in: hFile=0x310, lpBuffer=0x2807f58*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2807f58*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.611] CloseHandle (hObject=0x310) returned 1 [0116.612] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0116.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.612] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.613] GetFileType (hFile=0x310) returned 0x1 [0116.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.613] GetFileType (hFile=0x310) returned 0x1 [0116.613] WriteFile (in: hFile=0x310, lpBuffer=0x28090f8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28090f8*, lpNumberOfBytesWritten=0x12dc48*=0x5b0, lpOverlapped=0x0) returned 1 [0116.615] CloseHandle (hObject=0x310) returned 1 [0116.616] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0116.617] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0116.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.617] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9d2b110, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0116.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.618] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.symmyware")) returned 1 [0116.618] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.618] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.619] GetFileType (hFile=0x310) returned 0x1 [0116.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.619] GetFileType (hFile=0x310) returned 0x1 [0116.619] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x75e [0116.619] ReadFile (in: hFile=0x310, lpBuffer=0x280aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x280aca0*, lpNumberOfBytesRead=0x12dd38*=0x75e, lpOverlapped=0x0) returned 1 [0116.622] CloseHandle (hObject=0x310) returned 1 [0116.633] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.634] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.639] GetFileType (hFile=0x310) returned 0x1 [0116.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.640] GetFileType (hFile=0x310) returned 0x1 [0116.640] WriteFile (in: hFile=0x310, lpBuffer=0x285e698*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x285e698*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.642] CloseHandle (hObject=0x310) returned 1 [0116.642] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.643] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.644] GetFileType (hFile=0x310) returned 0x1 [0116.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.644] GetFileType (hFile=0x310) returned 0x1 [0116.644] WriteFile (in: hFile=0x310, lpBuffer=0x285f818*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x285f818*, lpNumberOfBytesWritten=0x12dc48*=0x760, lpOverlapped=0x0) returned 1 [0116.646] CloseHandle (hObject=0x310) returned 1 [0116.651] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.652] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0116.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.652] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9d681a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0116.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.652] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0116.653] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0116.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0116.653] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.654] GetFileType (hFile=0x310) returned 0x1 [0116.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0116.654] GetFileType (hFile=0x310) returned 0x1 [0116.655] WriteFile (in: hFile=0x310, lpBuffer=0x2862cd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2862cd8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0116.659] CloseHandle (hObject=0x310) returned 1 [0116.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.659] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.659] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.659] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.664] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.665] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0116.665] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0116.665] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0116.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.666] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.667] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.668] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.668] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0116.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0116.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0116.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0116.671] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.672] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0116.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.672] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.684] GetFileType (hFile=0x310) returned 0x1 [0116.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.684] GetFileType (hFile=0x310) returned 0x1 [0116.684] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5aa [0116.684] ReadFile (in: hFile=0x310, lpBuffer=0x2867528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2867528*, lpNumberOfBytesRead=0x12dd38*=0x5aa, lpOverlapped=0x0) returned 1 [0116.686] CloseHandle (hObject=0x310) returned 1 [0116.755] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0116.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.755] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.757] GetFileType (hFile=0x310) returned 0x1 [0116.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.757] GetFileType (hFile=0x310) returned 0x1 [0116.757] WriteFile (in: hFile=0x310, lpBuffer=0x28ba6c8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28ba6c8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.759] CloseHandle (hObject=0x310) returned 1 [0116.759] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0116.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.759] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.761] GetFileType (hFile=0x310) returned 0x1 [0116.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.761] GetFileType (hFile=0x310) returned 0x1 [0116.761] WriteFile (in: hFile=0x310, lpBuffer=0x28bb860*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28bb860*, lpNumberOfBytesWritten=0x12dc48*=0x5b0, lpOverlapped=0x0) returned 1 [0116.762] CloseHandle (hObject=0x310) returned 1 [0116.767] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0116.767] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x59 [0116.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.767] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9e6d550, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0116.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.768] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.symmyware")) returned 1 [0116.770] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.770] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.770] GetFileType (hFile=0x310) returned 0x1 [0116.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.771] GetFileType (hFile=0x310) returned 0x1 [0116.771] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x648 [0116.771] ReadFile (in: hFile=0x310, lpBuffer=0x28bd2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28bd2e8*, lpNumberOfBytesRead=0x12dd38*=0x648, lpOverlapped=0x0) returned 1 [0116.773] CloseHandle (hObject=0x310) returned 1 [0116.837] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.837] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.838] GetFileType (hFile=0x310) returned 0x1 [0116.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.839] GetFileType (hFile=0x310) returned 0x1 [0116.839] WriteFile (in: hFile=0x310, lpBuffer=0x27149c0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27149c0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.840] CloseHandle (hObject=0x310) returned 1 [0116.841] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.841] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.842] GetFileType (hFile=0x310) returned 0x1 [0116.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.842] GetFileType (hFile=0x310) returned 0x1 [0116.843] WriteFile (in: hFile=0x310, lpBuffer=0x2715b40*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2715b40*, lpNumberOfBytesWritten=0x12dc48*=0x650, lpOverlapped=0x0) returned 1 [0116.844] CloseHandle (hObject=0x310) returned 1 [0116.849] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.849] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0116.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.849] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf9f2bc30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0116.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.849] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0116.850] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0116.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0116.851] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.851] GetFileType (hFile=0x310) returned 0x1 [0116.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0116.851] GetFileType (hFile=0x310) returned 0x1 [0116.852] WriteFile (in: hFile=0x310, lpBuffer=0x2719000*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2719000*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0116.854] CloseHandle (hObject=0x310) returned 1 [0116.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.854] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.854] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.854] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.859] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.860] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0116.860] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0116.861] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0116.861] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.862] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.862] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.864] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.864] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.865] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.866] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.866] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0116.867] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0116.867] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0116.867] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.868] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0116.868] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.870] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0116.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.870] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.871] GetFileType (hFile=0x310) returned 0x1 [0116.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.872] GetFileType (hFile=0x310) returned 0x1 [0116.872] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xc72 [0116.872] ReadFile (in: hFile=0x310, lpBuffer=0x271df18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x271df18*, lpNumberOfBytesRead=0x12dd38*=0xc72, lpOverlapped=0x0) returned 1 [0116.874] CloseHandle (hObject=0x310) returned 1 [0116.939] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0116.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.940] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.941] GetFileType (hFile=0x310) returned 0x1 [0116.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.941] GetFileType (hFile=0x310) returned 0x1 [0116.941] WriteFile (in: hFile=0x310, lpBuffer=0x27734b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27734b0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.942] CloseHandle (hObject=0x310) returned 1 [0116.942] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0116.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.943] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.944] GetFileType (hFile=0x310) returned 0x1 [0116.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.944] GetFileType (hFile=0x310) returned 0x1 [0116.944] WriteFile (in: hFile=0x310, lpBuffer=0x2774640*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2774640*, lpNumberOfBytesWritten=0x12dc48*=0xc80, lpOverlapped=0x0) returned 1 [0116.945] CloseHandle (hObject=0x310) returned 1 [0116.946] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0116.947] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0116.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.947] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa011410, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0116.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.947] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.symmyware")) returned 1 [0116.948] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.949] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.951] GetFileType (hFile=0x310) returned 0x1 [0116.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.951] GetFileType (hFile=0x310) returned 0x1 [0116.951] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x106f [0116.951] ReadFile (in: hFile=0x310, lpBuffer=0x2775a30, nNumberOfBytesToRead=0x106f, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2775a30*, lpNumberOfBytesRead=0x12dd38*=0x106f, lpOverlapped=0x0) returned 1 [0116.953] CloseHandle (hObject=0x310) returned 1 [0116.962] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0116.962] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.963] GetFileType (hFile=0x310) returned 0x1 [0116.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0116.964] GetFileType (hFile=0x310) returned 0x1 [0116.964] WriteFile (in: hFile=0x310, lpBuffer=0x27cc1e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27cc1e8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0116.965] CloseHandle (hObject=0x310) returned 1 [0116.965] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.965] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.966] GetFileType (hFile=0x310) returned 0x1 [0116.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.966] GetFileType (hFile=0x310) returned 0x1 [0116.967] WriteFile (in: hFile=0x310, lpBuffer=0x27c9af8*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27c9af8*, lpNumberOfBytesWritten=0x12dd98*=0x1070, lpOverlapped=0x0) returned 1 [0116.968] CloseHandle (hObject=0x310) returned 1 [0116.968] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.969] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0116.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0116.969] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa046f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1070)) returned 1 [0116.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0116.969] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0116.970] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0116.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0116.970] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0116.970] GetFileType (hFile=0x310) returned 0x1 [0116.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0116.970] GetFileType (hFile=0x310) returned 0x1 [0116.971] WriteFile (in: hFile=0x310, lpBuffer=0x27cf810*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27cf810*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0116.972] CloseHandle (hObject=0x310) returned 1 [0116.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.972] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.972] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.973] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.974] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.974] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.974] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0116.975] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0116.975] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0116.975] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.975] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0116.975] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0116.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0116.976] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0116.976] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.976] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0116.976] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0116.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0116.977] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0116.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0116.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0116.978] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0116.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0116.978] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0116.978] GetFileType (hFile=0x310) returned 0x1 [0116.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0116.978] GetFileType (hFile=0x310) returned 0x1 [0116.978] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x978 [0116.979] ReadFile (in: hFile=0x310, lpBuffer=0x27d4288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27d4288*, lpNumberOfBytesRead=0x12dd38*=0x978, lpOverlapped=0x0) returned 1 [0116.981] CloseHandle (hObject=0x310) returned 1 [0117.032] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0117.032] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.034] GetFileType (hFile=0x310) returned 0x1 [0117.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0117.034] GetFileType (hFile=0x310) returned 0x1 [0117.034] WriteFile (in: hFile=0x310, lpBuffer=0x2828720*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2828720*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0117.035] CloseHandle (hObject=0x310) returned 1 [0117.035] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.036] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.037] GetFileType (hFile=0x310) returned 0x1 [0117.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.037] GetFileType (hFile=0x310) returned 0x1 [0117.037] WriteFile (in: hFile=0x310, lpBuffer=0x28298a0*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28298a0*, lpNumberOfBytesWritten=0x12dc48*=0x980, lpOverlapped=0x0) returned 1 [0117.038] CloseHandle (hObject=0x310) returned 1 [0117.039] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.039] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0117.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.039] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa0ecfb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0117.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0117.040] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0117.107] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0117.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.107] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.107] GetFileType (hFile=0x310) returned 0x1 [0117.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.107] GetFileType (hFile=0x310) returned 0x1 [0117.107] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x708 [0117.107] ReadFile (in: hFile=0x310, lpBuffer=0x282b3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x282b3e8*, lpNumberOfBytesRead=0x12dd38*=0x708, lpOverlapped=0x0) returned 1 [0117.153] CloseHandle (hObject=0x310) returned 1 [0117.160] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0117.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0117.160] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.161] GetFileType (hFile=0x310) returned 0x1 [0117.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0117.161] GetFileType (hFile=0x310) returned 0x1 [0117.161] WriteFile (in: hFile=0x310, lpBuffer=0x287ec50*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x287ec50*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0117.162] CloseHandle (hObject=0x310) returned 1 [0117.163] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0117.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.163] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.164] GetFileType (hFile=0x310) returned 0x1 [0117.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.164] GetFileType (hFile=0x310) returned 0x1 [0117.164] WriteFile (in: hFile=0x310, lpBuffer=0x287fdd0*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x287fdd0*, lpNumberOfBytesWritten=0x12dc48*=0x710, lpOverlapped=0x0) returned 1 [0117.165] CloseHandle (hObject=0x310) returned 1 [0117.166] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0117.166] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x54 [0117.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.166] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa21bb70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0117.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0117.167] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.symmyware")) returned 1 [0117.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0117.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0117.167] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.168] GetFileType (hFile=0x310) returned 0x1 [0117.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0117.168] GetFileType (hFile=0x310) returned 0x1 [0117.169] WriteFile (in: hFile=0x310, lpBuffer=0x28832a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28832a0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0117.170] CloseHandle (hObject=0x310) returned 1 [0117.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0117.170] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0117.171] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0117.171] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.201] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.201] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0117.201] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0117.201] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0117.202] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0117.202] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0117.202] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0117.203] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.203] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0117.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0117.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0117.204] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0117.204] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0117.204] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.206] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.206] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0117.206] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0117.206] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0117.207] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0117.207] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0117.208] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0117.208] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0117.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0117.209] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0117.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.209] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.211] GetFileType (hFile=0x310) returned 0x1 [0117.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.211] GetFileType (hFile=0x310) returned 0x1 [0117.211] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x32b [0117.211] ReadFile (in: hFile=0x310, lpBuffer=0x2887e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2887e88*, lpNumberOfBytesRead=0x12dd38*=0x32b, lpOverlapped=0x0) returned 1 [0117.239] CloseHandle (hObject=0x310) returned 1 [0117.250] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0117.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0117.250] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.251] GetFileType (hFile=0x310) returned 0x1 [0117.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0117.251] GetFileType (hFile=0x310) returned 0x1 [0117.252] WriteFile (in: hFile=0x310, lpBuffer=0x28da398*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28da398*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0117.252] CloseHandle (hObject=0x310) returned 1 [0117.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0117.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.254] GetFileType (hFile=0x310) returned 0x1 [0117.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.254] GetFileType (hFile=0x310) returned 0x1 [0117.254] WriteFile (in: hFile=0x310, lpBuffer=0x28db520*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28db520*, lpNumberOfBytesWritten=0x12dc48*=0x330, lpOverlapped=0x0) returned 1 [0117.255] CloseHandle (hObject=0x310) returned 1 [0117.274] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0117.274] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0117.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.274] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa2f28f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0117.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0117.275] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.symmyware")) returned 1 [0117.275] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.276] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.276] GetFileType (hFile=0x310) returned 0x1 [0117.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.276] GetFileType (hFile=0x310) returned 0x1 [0117.276] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16fc [0117.276] ReadFile (in: hFile=0x310, lpBuffer=0x28dc908, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28dc908*, lpNumberOfBytesRead=0x12dd38*=0x16fc, lpOverlapped=0x0) returned 1 [0117.332] CloseHandle (hObject=0x310) returned 1 [0117.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0117.536] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.537] GetFileType (hFile=0x310) returned 0x1 [0117.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0117.537] GetFileType (hFile=0x310) returned 0x1 [0117.538] WriteFile (in: hFile=0x310, lpBuffer=0x2736a68*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2736a68*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0117.539] CloseHandle (hObject=0x310) returned 1 [0117.539] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.539] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.541] GetFileType (hFile=0x310) returned 0x1 [0117.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.541] GetFileType (hFile=0x310) returned 0x1 [0117.541] WriteFile (in: hFile=0x310, lpBuffer=0x2733ce8*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2733ce8*, lpNumberOfBytesWritten=0x12dd98*=0x1700, lpOverlapped=0x0) returned 1 [0117.542] CloseHandle (hObject=0x310) returned 1 [0117.543] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.543] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0117.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.543] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa465a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1700)) returned 1 [0117.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0117.544] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0117.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.555] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0117.555] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0117.555] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.555] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.556] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.557] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0117.557] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0117.557] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.557] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.557] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0117.558] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.559] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.559] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.562] GetFileType (hFile=0x310) returned 0x1 [0117.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.562] GetFileType (hFile=0x310) returned 0x1 [0117.562] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x543 [0117.562] ReadFile (in: hFile=0x310, lpBuffer=0x273b308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x273b308*, lpNumberOfBytesRead=0x12dcb8*=0x543, lpOverlapped=0x0) returned 1 [0117.564] CloseHandle (hObject=0x310) returned 1 [0117.571] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0117.571] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.572] GetFileType (hFile=0x310) returned 0x1 [0117.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0117.572] GetFileType (hFile=0x310) returned 0x1 [0117.572] WriteFile (in: hFile=0x310, lpBuffer=0x278e4b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x278e4b0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0117.573] CloseHandle (hObject=0x310) returned 1 [0117.576] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.576] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.577] GetFileType (hFile=0x310) returned 0x1 [0117.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.578] GetFileType (hFile=0x310) returned 0x1 [0117.578] WriteFile (in: hFile=0x310, lpBuffer=0x278f640*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x278f640*, lpNumberOfBytesWritten=0x12dbc8*=0x550, lpOverlapped=0x0) returned 1 [0117.579] CloseHandle (hObject=0x310) returned 1 [0117.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.581] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.SYMMYWARE", lpFilePart=0x0) returned 0x5b [0117.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0117.581] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfa4b8a90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0117.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0117.581] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.symmyware")) returned 1 [0117.582] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0117.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0117.582] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.583] GetFileType (hFile=0x310) returned 0x1 [0117.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0117.583] GetFileType (hFile=0x310) returned 0x1 [0117.583] WriteFile (in: hFile=0x310, lpBuffer=0x2792b50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2792b50*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0117.585] CloseHandle (hObject=0x310) returned 1 [0117.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.585] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0117.585] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0117.585] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.586] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.586] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.586] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.587] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.587] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.587] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.587] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0117.587] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0117.587] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.589] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.589] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0117.589] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.589] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.590] GetFileType (hFile=0x310) returned 0x1 [0117.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.590] GetFileType (hFile=0x310) returned 0x1 [0117.590] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x5b1 [0117.590] ReadFile (in: hFile=0x310, lpBuffer=0x2797120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2797120*, lpNumberOfBytesRead=0x12dcb8*=0x5b1, lpOverlapped=0x0) returned 1 [0117.641] CloseHandle (hObject=0x310) returned 1 [0117.738] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0117.738] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.740] GetFileType (hFile=0x310) returned 0x1 [0117.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0117.740] GetFileType (hFile=0x310) returned 0x1 [0117.740] WriteFile (in: hFile=0x310, lpBuffer=0x27ea310*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27ea310*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0117.741] CloseHandle (hObject=0x310) returned 1 [0117.741] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.741] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.742] GetFileType (hFile=0x310) returned 0x1 [0117.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.742] GetFileType (hFile=0x310) returned 0x1 [0117.742] WriteFile (in: hFile=0x310, lpBuffer=0x27eb4a0*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x27eb4a0*, lpNumberOfBytesWritten=0x12dbc8*=0x5c0, lpOverlapped=0x0) returned 1 [0117.743] CloseHandle (hObject=0x310) returned 1 [0117.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.SYMMYWARE", lpFilePart=0x0) returned 0x5b [0117.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0117.745] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa63f490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0117.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0117.745] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.symmyware")) returned 1 [0117.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0117.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0117.746] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.746] GetFileType (hFile=0x310) returned 0x1 [0117.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0117.746] GetFileType (hFile=0x310) returned 0x1 [0117.747] WriteFile (in: hFile=0x310, lpBuffer=0x27ee9b0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27ee9b0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0117.747] CloseHandle (hObject=0x310) returned 1 [0117.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.748] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0117.748] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0117.748] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.748] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.749] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.749] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.749] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.749] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.749] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.750] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0117.750] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0117.750] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.750] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.750] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0117.751] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0117.751] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0117.751] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0117.751] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0117.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0117.751] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.751] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.752] GetFileType (hFile=0x310) returned 0x1 [0117.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.752] GetFileType (hFile=0x310) returned 0x1 [0117.752] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x5b2 [0117.752] ReadFile (in: hFile=0x310, lpBuffer=0x27f2f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27f2f80*, lpNumberOfBytesRead=0x12dcb8*=0x5b2, lpOverlapped=0x0) returned 1 [0117.754] CloseHandle (hObject=0x310) returned 1 [0117.813] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0117.814] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.815] GetFileType (hFile=0x310) returned 0x1 [0117.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0117.815] GetFileType (hFile=0x310) returned 0x1 [0117.815] WriteFile (in: hFile=0x310, lpBuffer=0x2846170*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2846170*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0117.816] CloseHandle (hObject=0x310) returned 1 [0117.816] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0117.816] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.817] GetFileType (hFile=0x310) returned 0x1 [0117.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0117.817] GetFileType (hFile=0x310) returned 0x1 [0117.817] WriteFile (in: hFile=0x310, lpBuffer=0x2847300*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x2847300*, lpNumberOfBytesWritten=0x12dbc8*=0x5c0, lpOverlapped=0x0) returned 1 [0117.818] CloseHandle (hObject=0x310) returned 1 [0117.820] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0117.820] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.SYMMYWARE", lpFilePart=0x0) returned 0x5b [0117.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0117.820] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa6f1820, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0117.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0117.820] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.symmyware")) returned 1 [0117.821] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0117.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0117.821] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.821] GetFileType (hFile=0x310) returned 0x1 [0117.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0117.822] GetFileType (hFile=0x310) returned 0x1 [0117.822] WriteFile (in: hFile=0x310, lpBuffer=0x284a810*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x284a810*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0117.824] CloseHandle (hObject=0x310) returned 1 [0117.824] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0117.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0117.824] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.825] GetFileType (hFile=0x310) returned 0x1 [0117.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0117.825] GetFileType (hFile=0x310) returned 0x1 [0117.826] WriteFile (in: hFile=0x310, lpBuffer=0x284daf8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x284daf8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0117.827] CloseHandle (hObject=0x310) returned 1 [0117.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0117.830] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0117.830] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0117.831] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.924] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.925] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0117.925] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0117.925] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0117.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0117.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.926] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0117.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0117.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0117.927] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0117.927] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0117.928] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0117.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0117.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0117.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0117.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0117.933] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0117.933] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0117.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0117.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0117.935] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0117.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.935] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.936] GetFileType (hFile=0x310) returned 0x1 [0117.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.936] GetFileType (hFile=0x310) returned 0x1 [0117.936] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x567 [0117.936] ReadFile (in: hFile=0x310, lpBuffer=0x28522e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28522e8*, lpNumberOfBytesRead=0x12dd38*=0x567, lpOverlapped=0x0) returned 1 [0117.939] CloseHandle (hObject=0x310) returned 1 [0117.983] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0117.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0117.984] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0117.985] GetFileType (hFile=0x310) returned 0x1 [0117.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0117.985] GetFileType (hFile=0x310) returned 0x1 [0117.985] WriteFile (in: hFile=0x310, lpBuffer=0x28a5348*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28a5348*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0117.986] CloseHandle (hObject=0x310) returned 1 [0117.986] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0117.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.986] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.987] GetFileType (hFile=0x310) returned 0x1 [0117.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.987] GetFileType (hFile=0x310) returned 0x1 [0117.987] WriteFile (in: hFile=0x310, lpBuffer=0x28a64d8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28a64d8*, lpNumberOfBytesWritten=0x12dc48*=0x570, lpOverlapped=0x0) returned 1 [0117.988] CloseHandle (hObject=0x310) returned 1 [0117.992] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0117.992] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x58 [0117.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0117.992] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa836370, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0117.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0117.993] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.symmyware")) returned 1 [0117.993] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0117.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0117.994] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0117.994] GetFileType (hFile=0x310) returned 0x1 [0117.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0117.994] GetFileType (hFile=0x310) returned 0x1 [0117.994] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x93a [0117.994] ReadFile (in: hFile=0x310, lpBuffer=0x28a8258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28a8258*, lpNumberOfBytesRead=0x12dd38*=0x93a, lpOverlapped=0x0) returned 1 [0117.996] CloseHandle (hObject=0x310) returned 1 [0118.009] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.009] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.011] GetFileType (hFile=0x310) returned 0x1 [0118.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.011] GetFileType (hFile=0x310) returned 0x1 [0118.011] WriteFile (in: hFile=0x310, lpBuffer=0x28fc5b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28fc5b0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.013] CloseHandle (hObject=0x310) returned 1 [0118.013] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.013] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.015] GetFileType (hFile=0x310) returned 0x1 [0118.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.015] GetFileType (hFile=0x310) returned 0x1 [0118.015] WriteFile (in: hFile=0x310, lpBuffer=0x28fd730*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28fd730*, lpNumberOfBytesWritten=0x12dc48*=0x940, lpOverlapped=0x0) returned 1 [0118.016] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.016] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.017] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa870cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0118.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.017] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.018] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.018] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.020] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.024] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.024] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0118.025] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0118.025] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0118.025] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.025] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.025] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.027] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.027] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.027] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.028] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.028] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0118.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0118.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0118.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.029] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0118.030] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.031] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0118.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.032] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x4cf [0118.032] ReadFile (in: hFile=0x310, lpBuffer=0x2905360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2905360*, lpNumberOfBytesRead=0x12dd38*=0x4cf, lpOverlapped=0x0) returned 1 [0118.097] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0118.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.097] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.099] GetFileType (hFile=0x310) returned 0x1 [0118.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.099] GetFileType (hFile=0x310) returned 0x1 [0118.099] WriteFile (in: hFile=0x310, lpBuffer=0x2756cc0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2756cc0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.100] CloseHandle (hObject=0x310) returned 1 [0118.100] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0118.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.101] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.102] GetFileType (hFile=0x310) returned 0x1 [0118.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.102] GetFileType (hFile=0x310) returned 0x1 [0118.102] WriteFile (in: hFile=0x310, lpBuffer=0x2757e50*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2757e50*, lpNumberOfBytesWritten=0x12dc48*=0x4d0, lpOverlapped=0x0) returned 1 [0118.103] CloseHandle (hObject=0x310) returned 1 [0118.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0118.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x58 [0118.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.104] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa9341f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0118.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.105] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.symmyware")) returned 1 [0118.105] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.106] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.106] GetFileType (hFile=0x310) returned 0x1 [0118.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.106] GetFileType (hFile=0x310) returned 0x1 [0118.106] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x73c [0118.106] ReadFile (in: hFile=0x310, lpBuffer=0x27599a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27599a8*, lpNumberOfBytesRead=0x12dd38*=0x73c, lpOverlapped=0x0) returned 1 [0118.108] CloseHandle (hObject=0x310) returned 1 [0118.120] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.120] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.121] GetFileType (hFile=0x310) returned 0x1 [0118.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.121] GetFileType (hFile=0x310) returned 0x1 [0118.122] WriteFile (in: hFile=0x310, lpBuffer=0x27ad4e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27ad4e8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.123] CloseHandle (hObject=0x310) returned 1 [0118.123] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.123] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.124] GetFileType (hFile=0x310) returned 0x1 [0118.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.124] GetFileType (hFile=0x310) returned 0x1 [0118.125] WriteFile (in: hFile=0x310, lpBuffer=0x27ae668*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x27ae668*, lpNumberOfBytesWritten=0x12dc48*=0x740, lpOverlapped=0x0) returned 1 [0118.126] CloseHandle (hObject=0x310) returned 1 [0118.132] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.132] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.132] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa96c460, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0118.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.132] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.133] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.133] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.133] GetFileType (hFile=0x310) returned 0x1 [0118.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.133] GetFileType (hFile=0x310) returned 0x1 [0118.134] WriteFile (in: hFile=0x310, lpBuffer=0x27b1b28*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27b1b28*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0118.135] CloseHandle (hObject=0x310) returned 1 [0118.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.136] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.136] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.136] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.136] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.137] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.137] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0118.137] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0118.137] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0118.137] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.137] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.138] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.138] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.138] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.138] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.138] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0118.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0118.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0118.139] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0118.139] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.140] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.141] GetFileType (hFile=0x310) returned 0x1 [0118.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.141] GetFileType (hFile=0x310) returned 0x1 [0118.141] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1861 [0118.141] ReadFile (in: hFile=0x310, lpBuffer=0x27b5c38, nNumberOfBytesToRead=0x1861, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27b5c38*, lpNumberOfBytesRead=0x12dd38*=0x1861, lpOverlapped=0x0) returned 1 [0118.143] CloseHandle (hObject=0x310) returned 1 [0118.256] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.256] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.258] GetFileType (hFile=0x310) returned 0x1 [0118.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.258] GetFileType (hFile=0x310) returned 0x1 [0118.258] WriteFile (in: hFile=0x310, lpBuffer=0x280f3f0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x280f3f0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.259] CloseHandle (hObject=0x310) returned 1 [0118.260] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.261] GetFileType (hFile=0x310) returned 0x1 [0118.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.261] GetFileType (hFile=0x310) returned 0x1 [0118.261] WriteFile (in: hFile=0x310, lpBuffer=0x280c500*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x280c500*, lpNumberOfBytesWritten=0x12dd98*=0x1870, lpOverlapped=0x0) returned 1 [0118.262] CloseHandle (hObject=0x310) returned 1 [0118.263] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.264] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xfa9c1b90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0118.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.264] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.267] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0118.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.267] GetFileType (hFile=0x310) returned 0x1 [0118.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.267] GetFileType (hFile=0x310) returned 0x1 [0118.267] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x251f [0118.267] ReadFile (in: hFile=0x310, lpBuffer=0x2810988, nNumberOfBytesToRead=0x251f, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2810988*, lpNumberOfBytesRead=0x12dd38*=0x251f, lpOverlapped=0x0) returned 1 [0118.301] CloseHandle (hObject=0x310) returned 1 [0118.311] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0118.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.312] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.317] GetFileType (hFile=0x310) returned 0x1 [0118.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.317] GetFileType (hFile=0x310) returned 0x1 [0118.318] WriteFile (in: hFile=0x310, lpBuffer=0x286ed68*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x286ed68*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.319] CloseHandle (hObject=0x310) returned 1 [0118.319] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0118.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.319] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.320] GetFileType (hFile=0x310) returned 0x1 [0118.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.321] GetFileType (hFile=0x310) returned 0x1 [0118.321] WriteFile (in: hFile=0x310, lpBuffer=0x286b1c0*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x286b1c0*, lpNumberOfBytesWritten=0x12dd98*=0x2520, lpOverlapped=0x0) returned 1 [0118.322] CloseHandle (hObject=0x310) returned 1 [0118.323] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0118.323] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0118.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.324] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xfaa1c0e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x2520)) returned 1 [0118.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.324] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.symmyware")) returned 1 [0118.325] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.325] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.326] GetFileType (hFile=0x310) returned 0x1 [0118.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.326] GetFileType (hFile=0x310) returned 0x1 [0118.328] WriteFile (in: hFile=0x310, lpBuffer=0x28723a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28723a8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0118.329] CloseHandle (hObject=0x310) returned 1 [0118.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.329] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.329] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.329] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.341] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.343] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.344] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.344] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.344] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.346] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0118.347] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0118.347] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.347] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0118.347] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.348] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0118.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.349] GetFileType (hFile=0x310) returned 0x1 [0118.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.349] GetFileType (hFile=0x310) returned 0x1 [0118.349] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x646 [0118.350] ReadFile (in: hFile=0x310, lpBuffer=0x2876c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2876c68*, lpNumberOfBytesRead=0x12dd38*=0x646, lpOverlapped=0x0) returned 1 [0118.354] CloseHandle (hObject=0x310) returned 1 [0118.406] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0118.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.406] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.407] GetFileType (hFile=0x310) returned 0x1 [0118.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.408] GetFileType (hFile=0x310) returned 0x1 [0118.408] WriteFile (in: hFile=0x310, lpBuffer=0x28ca128*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28ca128*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.409] CloseHandle (hObject=0x310) returned 1 [0118.409] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0118.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.409] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.411] GetFileType (hFile=0x310) returned 0x1 [0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.411] GetFileType (hFile=0x310) returned 0x1 [0118.411] WriteFile (in: hFile=0x310, lpBuffer=0x28cb2b8*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28cb2b8*, lpNumberOfBytesWritten=0x12dc48*=0x650, lpOverlapped=0x0) returned 1 [0118.412] CloseHandle (hObject=0x310) returned 1 [0118.415] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0118.415] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0118.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.415] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfaaf7c80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0118.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.415] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.symmyware")) returned 1 [0118.416] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.416] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.419] GetFileType (hFile=0x310) returned 0x1 [0118.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.419] GetFileType (hFile=0x310) returned 0x1 [0118.419] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x7c4 [0118.420] ReadFile (in: hFile=0x310, lpBuffer=0x28cceb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28cceb0*, lpNumberOfBytesRead=0x12dd38*=0x7c4, lpOverlapped=0x0) returned 1 [0118.422] CloseHandle (hObject=0x310) returned 1 [0118.470] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.470] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.471] GetFileType (hFile=0x310) returned 0x1 [0118.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.471] GetFileType (hFile=0x310) returned 0x1 [0118.471] WriteFile (in: hFile=0x310, lpBuffer=0x2720da8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2720da8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.473] CloseHandle (hObject=0x310) returned 1 [0118.473] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.474] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.475] GetFileType (hFile=0x310) returned 0x1 [0118.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.475] GetFileType (hFile=0x310) returned 0x1 [0118.475] WriteFile (in: hFile=0x310, lpBuffer=0x2721f28*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2721f28*, lpNumberOfBytesWritten=0x12dc48*=0x7d0, lpOverlapped=0x0) returned 1 [0118.476] CloseHandle (hObject=0x310) returned 1 [0118.477] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.478] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.478] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfab8a440, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0118.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.478] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.479] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.479] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.479] GetFileType (hFile=0x310) returned 0x1 [0118.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.479] GetFileType (hFile=0x310) returned 0x1 [0118.480] WriteFile (in: hFile=0x310, lpBuffer=0x27253e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27253e8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0118.481] CloseHandle (hObject=0x310) returned 1 [0118.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.482] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.482] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.482] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.487] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.487] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0118.487] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0118.487] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0118.488] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.488] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.488] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.489] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.489] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.490] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.491] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0118.491] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0118.491] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0118.491] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.492] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0118.492] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.493] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0118.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.493] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.494] GetFileType (hFile=0x310) returned 0x1 [0118.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.495] GetFileType (hFile=0x310) returned 0x1 [0118.495] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5ac [0118.495] ReadFile (in: hFile=0x310, lpBuffer=0x2729c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2729c10*, lpNumberOfBytesRead=0x12dd38*=0x5ac, lpOverlapped=0x0) returned 1 [0118.497] CloseHandle (hObject=0x310) returned 1 [0118.506] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0118.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.506] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.508] GetFileType (hFile=0x310) returned 0x1 [0118.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.508] GetFileType (hFile=0x310) returned 0x1 [0118.508] WriteFile (in: hFile=0x310, lpBuffer=0x277cf90*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x277cf90*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.509] CloseHandle (hObject=0x310) returned 1 [0118.509] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0118.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.509] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.510] GetFileType (hFile=0x310) returned 0x1 [0118.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.510] GetFileType (hFile=0x310) returned 0x1 [0118.510] WriteFile (in: hFile=0x310, lpBuffer=0x277e120*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x277e120*, lpNumberOfBytesWritten=0x12dc48*=0x5b0, lpOverlapped=0x0) returned 1 [0118.511] CloseHandle (hObject=0x310) returned 1 [0118.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0118.515] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0118.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.515] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xfabd8640, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0118.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.515] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.symmyware")) returned 1 [0118.516] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.516] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.527] GetFileType (hFile=0x310) returned 0x1 [0118.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.527] GetFileType (hFile=0x310) returned 0x1 [0118.527] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x750 [0118.527] ReadFile (in: hFile=0x310, lpBuffer=0x277fca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x277fca0*, lpNumberOfBytesRead=0x12dd38*=0x750, lpOverlapped=0x0) returned 1 [0118.529] CloseHandle (hObject=0x310) returned 1 [0118.537] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.538] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.539] GetFileType (hFile=0x310) returned 0x1 [0118.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.539] GetFileType (hFile=0x310) returned 0x1 [0118.540] WriteFile (in: hFile=0x310, lpBuffer=0x27d36a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27d36a0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.541] CloseHandle (hObject=0x310) returned 1 [0118.541] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.541] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.542] GetFileType (hFile=0x310) returned 0x1 [0118.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.543] GetFileType (hFile=0x310) returned 0x1 [0118.543] WriteFile (in: hFile=0x310, lpBuffer=0x27d4820*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x27d4820*, lpNumberOfBytesWritten=0x12dc48*=0x760, lpOverlapped=0x0) returned 1 [0118.544] CloseHandle (hObject=0x310) returned 1 [0118.545] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.545] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.545] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xfac21a20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0118.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.546] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.546] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.547] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.547] GetFileType (hFile=0x310) returned 0x1 [0118.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.547] GetFileType (hFile=0x310) returned 0x1 [0118.548] WriteFile (in: hFile=0x310, lpBuffer=0x27d7ce0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27d7ce0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0118.551] CloseHandle (hObject=0x310) returned 1 [0118.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.551] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.552] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.552] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.563] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.563] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0118.563] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0118.564] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0118.564] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.564] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.564] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.566] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.566] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.566] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.567] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.568] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0118.568] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0118.568] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0118.569] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.569] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0118.569] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.570] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0118.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.570] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.575] GetFileType (hFile=0x310) returned 0x1 [0118.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.575] GetFileType (hFile=0x310) returned 0x1 [0118.575] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x391 [0118.575] ReadFile (in: hFile=0x310, lpBuffer=0x27dc328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27dc328*, lpNumberOfBytesRead=0x12dd38*=0x391, lpOverlapped=0x0) returned 1 [0118.577] CloseHandle (hObject=0x310) returned 1 [0118.584] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0118.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.584] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.585] GetFileType (hFile=0x310) returned 0x1 [0118.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.585] GetFileType (hFile=0x310) returned 0x1 [0118.585] WriteFile (in: hFile=0x310, lpBuffer=0x282ea78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x282ea78*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.587] CloseHandle (hObject=0x310) returned 1 [0118.587] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0118.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.587] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.588] GetFileType (hFile=0x310) returned 0x1 [0118.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.588] GetFileType (hFile=0x310) returned 0x1 [0118.589] WriteFile (in: hFile=0x310, lpBuffer=0x282fc08*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x282fc08*, lpNumberOfBytesWritten=0x12dc48*=0x3a0, lpOverlapped=0x0) returned 1 [0118.590] CloseHandle (hObject=0x310) returned 1 [0118.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0118.591] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0118.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.591] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfac8d0e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0118.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.592] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.symmyware")) returned 1 [0118.592] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.593] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.593] GetFileType (hFile=0x310) returned 0x1 [0118.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.593] GetFileType (hFile=0x310) returned 0x1 [0118.593] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5ac [0118.593] ReadFile (in: hFile=0x310, lpBuffer=0x28315c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28315c0*, lpNumberOfBytesRead=0x12dd38*=0x5ac, lpOverlapped=0x0) returned 1 [0118.597] CloseHandle (hObject=0x310) returned 1 [0118.605] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.605] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.606] GetFileType (hFile=0x310) returned 0x1 [0118.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.606] GetFileType (hFile=0x310) returned 0x1 [0118.606] WriteFile (in: hFile=0x310, lpBuffer=0x2884748*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2884748*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.607] CloseHandle (hObject=0x310) returned 1 [0118.608] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.608] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.609] GetFileType (hFile=0x310) returned 0x1 [0118.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.609] GetFileType (hFile=0x310) returned 0x1 [0118.609] WriteFile (in: hFile=0x310, lpBuffer=0x28858c8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28858c8*, lpNumberOfBytesWritten=0x12dc48*=0x5b0, lpOverlapped=0x0) returned 1 [0118.610] CloseHandle (hObject=0x310) returned 1 [0118.611] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0118.611] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0118.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.611] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfacbde20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0118.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.611] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0118.612] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0118.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0118.612] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.612] GetFileType (hFile=0x310) returned 0x1 [0118.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0118.612] GetFileType (hFile=0x310) returned 0x1 [0118.613] WriteFile (in: hFile=0x310, lpBuffer=0x2888d88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2888d88*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0118.614] CloseHandle (hObject=0x310) returned 1 [0118.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.614] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.614] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.614] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.617] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.617] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0118.617] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0118.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0118.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0118.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0118.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0118.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0118.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0118.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0118.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0118.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0118.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.620] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0118.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0118.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0118.622] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0118.623] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.623] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0118.623] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0118.624] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0118.624] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0118.624] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0118.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0118.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0118.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0118.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0118.626] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0118.626] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0118.626] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0118.626] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0118.627] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0118.627] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0118.627] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0118.627] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0118.627] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0118.628] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0118.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0118.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0118.629] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0118.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.657] GetFileType (hFile=0x310) returned 0x1 [0118.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.657] GetFileType (hFile=0x310) returned 0x1 [0118.657] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x91975 [0118.660] ReadFile (in: hFile=0x310, lpBuffer=0x126d21a0, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesRead=0x12dd38*=0x91975, lpOverlapped=0x0) returned 1 [0118.687] CloseHandle (hObject=0x310) returned 1 [0118.892] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0118.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.892] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.893] GetFileType (hFile=0x310) returned 0x1 [0118.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.893] GetFileType (hFile=0x310) returned 0x1 [0118.893] WriteFile (in: hFile=0x310, lpBuffer=0x26da700*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26da700*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.894] CloseHandle (hObject=0x310) returned 1 [0118.894] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0118.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.895] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.895] GetFileType (hFile=0x310) returned 0x1 [0118.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.895] GetFileType (hFile=0x310) returned 0x1 [0118.895] WriteFile (in: hFile=0x310, lpBuffer=0x12763b50*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x12763b50*, lpNumberOfBytesWritten=0x12dd98*=0x91980, lpOverlapped=0x0) returned 1 [0118.907] CloseHandle (hObject=0x310) returned 1 [0118.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0118.913] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0118.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.913] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfaf53810, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x91980)) returned 1 [0118.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.913] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.symmyware")) returned 1 [0118.914] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0118.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.914] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.914] GetFileType (hFile=0x310) returned 0x1 [0118.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.914] GetFileType (hFile=0x310) returned 0x1 [0118.915] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x15b5 [0118.915] ReadFile (in: hFile=0x310, lpBuffer=0x26dbd88, nNumberOfBytesToRead=0x15b5, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26dbd88*, lpNumberOfBytesRead=0x12dd38*=0x15b5, lpOverlapped=0x0) returned 1 [0118.916] CloseHandle (hObject=0x310) returned 1 [0118.993] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0118.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0118.993] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0118.994] GetFileType (hFile=0x310) returned 0x1 [0118.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0118.994] GetFileType (hFile=0x310) returned 0x1 [0118.994] WriteFile (in: hFile=0x310, lpBuffer=0x2734718*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2734718*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0118.995] CloseHandle (hObject=0x310) returned 1 [0118.995] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0118.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0118.996] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0118.996] GetFileType (hFile=0x310) returned 0x1 [0118.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0118.996] GetFileType (hFile=0x310) returned 0x1 [0118.997] WriteFile (in: hFile=0x310, lpBuffer=0x2731ac8*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2731ac8*, lpNumberOfBytesWritten=0x12dd98*=0x15c0, lpOverlapped=0x0) returned 1 [0118.997] CloseHandle (hObject=0x310) returned 1 [0118.998] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0118.998] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0118.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0118.999] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfafe5fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x15c0)) returned 1 [0118.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0118.999] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.symmyware")) returned 1 [0118.999] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0118.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.000] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.000] GetFileType (hFile=0x310) returned 0x1 [0119.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.000] GetFileType (hFile=0x310) returned 0x1 [0119.000] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x333 [0119.000] ReadFile (in: hFile=0x310, lpBuffer=0x2736010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2736010*, lpNumberOfBytesRead=0x12dd38*=0x333, lpOverlapped=0x0) returned 1 [0119.002] CloseHandle (hObject=0x310) returned 1 [0119.010] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0119.010] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.011] GetFileType (hFile=0x310) returned 0x1 [0119.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0119.011] GetFileType (hFile=0x310) returned 0x1 [0119.012] WriteFile (in: hFile=0x310, lpBuffer=0x2788588*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2788588*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0119.012] CloseHandle (hObject=0x310) returned 1 [0119.013] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.013] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.014] GetFileType (hFile=0x310) returned 0x1 [0119.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.014] GetFileType (hFile=0x310) returned 0x1 [0119.014] WriteFile (in: hFile=0x310, lpBuffer=0x2789720*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x2789720*, lpNumberOfBytesWritten=0x12dc48*=0x340, lpOverlapped=0x0) returned 1 [0119.015] CloseHandle (hObject=0x310) returned 1 [0119.018] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.019] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.SYMMYWARE", lpFilePart=0x0) returned 0x59 [0119.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.019] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb00d0d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0119.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0119.019] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.symmyware")) returned 1 [0119.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.020] GetFileType (hFile=0x310) returned 0x1 [0119.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.020] GetFileType (hFile=0x310) returned 0x1 [0119.020] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x2488 [0119.020] ReadFile (in: hFile=0x310, lpBuffer=0x278ab98, nNumberOfBytesToRead=0x2488, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x278ab98*, lpNumberOfBytesRead=0x12dd38*=0x2488, lpOverlapped=0x0) returned 1 [0119.023] CloseHandle (hObject=0x310) returned 1 [0119.031] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0119.031] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.032] GetFileType (hFile=0x310) returned 0x1 [0119.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0119.032] GetFileType (hFile=0x310) returned 0x1 [0119.032] WriteFile (in: hFile=0x310, lpBuffer=0x27e8c08*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27e8c08*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0119.033] CloseHandle (hObject=0x310) returned 1 [0119.033] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.034] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.034] GetFileType (hFile=0x310) returned 0x1 [0119.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.035] GetFileType (hFile=0x310) returned 0x1 [0119.035] WriteFile (in: hFile=0x310, lpBuffer=0x27e50f8*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27e50f8*, lpNumberOfBytesWritten=0x12dd98*=0x2490, lpOverlapped=0x0) returned 1 [0119.036] CloseHandle (hObject=0x310) returned 1 [0119.038] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.038] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0119.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.038] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb038ff0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0119.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0119.039] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0119.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.040] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0119.040] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0119.040] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.043] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.043] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0119.043] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.043] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0119.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0119.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.044] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0119.044] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0119.044] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.044] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0119.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0119.045] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0119.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0119.045] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0119.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0119.045] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.051] GetFileType (hFile=0x310) returned 0x1 [0119.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0119.051] GetFileType (hFile=0x310) returned 0x1 [0119.052] WriteFile (in: hFile=0x310, lpBuffer=0x27ee768*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27ee768*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0119.053] CloseHandle (hObject=0x310) returned 1 [0119.053] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0119.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0119.054] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.054] GetFileType (hFile=0x310) returned 0x1 [0119.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0119.054] GetFileType (hFile=0x310) returned 0x1 [0119.055] WriteFile (in: hFile=0x310, lpBuffer=0x27f1a50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27f1a50*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0119.056] CloseHandle (hObject=0x310) returned 1 [0119.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0119.056] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0119.057] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0119.057] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.063] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.063] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0119.063] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0119.063] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0119.064] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0119.064] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.064] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0119.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0119.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0119.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0119.065] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0119.065] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.067] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.067] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0119.067] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0119.067] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0119.068] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0119.068] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0119.068] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0119.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0119.069] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.069] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.078] GetFileType (hFile=0x310) returned 0x1 [0119.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.078] GetFileType (hFile=0x310) returned 0x1 [0119.078] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x333 [0119.078] ReadFile (in: hFile=0x310, lpBuffer=0x27f60e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27f60e0*, lpNumberOfBytesRead=0x12dd38*=0x333, lpOverlapped=0x0) returned 1 [0119.081] CloseHandle (hObject=0x310) returned 1 [0119.497] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0119.497] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.501] GetFileType (hFile=0x310) returned 0x1 [0119.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0119.501] GetFileType (hFile=0x310) returned 0x1 [0119.502] WriteFile (in: hFile=0x310, lpBuffer=0x2848658*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2848658*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0119.503] CloseHandle (hObject=0x310) returned 1 [0119.503] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.503] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.505] GetFileType (hFile=0x310) returned 0x1 [0119.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.505] GetFileType (hFile=0x310) returned 0x1 [0119.505] WriteFile (in: hFile=0x310, lpBuffer=0x28497f0*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28497f0*, lpNumberOfBytesWritten=0x12dc48*=0x340, lpOverlapped=0x0) returned 1 [0119.506] CloseHandle (hObject=0x310) returned 1 [0119.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0119.507] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.SYMMYWARE", lpFilePart=0x0) returned 0x59 [0119.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.507] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb14ce00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0119.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0119.508] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.symmyware")) returned 1 [0119.509] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.509] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.509] GetFileType (hFile=0x310) returned 0x1 [0119.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.510] GetFileType (hFile=0x310) returned 0x1 [0119.510] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xa40 [0119.510] ReadFile (in: hFile=0x310, lpBuffer=0x284b648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x284b648*, lpNumberOfBytesRead=0x12dd38*=0xa40, lpOverlapped=0x0) returned 1 [0119.512] CloseHandle (hObject=0x310) returned 1 [0119.563] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0119.563] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.580] GetFileType (hFile=0x310) returned 0x1 [0119.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0119.580] GetFileType (hFile=0x310) returned 0x1 [0119.580] WriteFile (in: hFile=0x310, lpBuffer=0x289fef8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x289fef8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0119.591] CloseHandle (hObject=0x310) returned 1 [0119.592] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0119.592] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.593] GetFileType (hFile=0x310) returned 0x1 [0119.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0119.593] GetFileType (hFile=0x310) returned 0x1 [0119.593] WriteFile (in: hFile=0x310, lpBuffer=0x28a1078*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x28a1078*, lpNumberOfBytesWritten=0x12dc48*=0xa50, lpOverlapped=0x0) returned 1 [0119.594] CloseHandle (hObject=0x310) returned 1 [0119.595] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0119.596] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0119.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.596] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb1b0f90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0119.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0119.596] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0119.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.598] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0119.598] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0119.599] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.613] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.613] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0119.614] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0119.614] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0119.615] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0119.615] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.615] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0119.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0119.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0119.616] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0119.616] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0119.617] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0119.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.618] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0119.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0119.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0119.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0119.619] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0119.619] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0119.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0119.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0119.620] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0119.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0119.621] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.630] GetFileType (hFile=0x310) returned 0x1 [0119.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0119.630] GetFileType (hFile=0x310) returned 0x1 [0119.630] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x545 [0119.631] ReadFile (in: hFile=0x310, lpBuffer=0x28a5e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28a5e70*, lpNumberOfBytesRead=0x12dcb8*=0x545, lpOverlapped=0x0) returned 1 [0119.642] CloseHandle (hObject=0x310) returned 1 [0119.749] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0119.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0119.749] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x310 [0119.751] GetFileType (hFile=0x310) returned 0x1 [0119.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0119.751] GetFileType (hFile=0x310) returned 0x1 [0119.751] WriteFile (in: hFile=0x310, lpBuffer=0x26fa570*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x26fa570*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0119.752] CloseHandle (hObject=0x310) returned 1 [0119.753] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0119.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0119.753] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.754] GetFileType (hFile=0x310) returned 0x1 [0119.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0119.754] GetFileType (hFile=0x310) returned 0x1 [0119.754] WriteFile (in: hFile=0x310, lpBuffer=0x26fb718*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x26fb718*, lpNumberOfBytesWritten=0x12dbc8*=0x550, lpOverlapped=0x0) returned 1 [0119.756] CloseHandle (hObject=0x310) returned 1 [0119.757] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0119.757] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.SYMMYWARE", lpFilePart=0x0) returned 0x63 [0119.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0119.757] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb312fa0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0119.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0119.757] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.symmyware")) returned 1 [0119.758] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0119.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0119.759] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x310 [0119.760] GetFileType (hFile=0x310) returned 0x1 [0119.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0119.760] GetFileType (hFile=0x310) returned 0x1 [0119.760] GetFileSize (in: hFile=0x310, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x91975 [0119.761] ReadFile (in: hFile=0x310, lpBuffer=0x129aa1b8, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x129aa1b8*, lpNumberOfBytesRead=0x12dcb8*=0x91975, lpOverlapped=0x0) returned 1 [0119.777] CloseHandle (hObject=0x310) returned 1 [0119.876] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0119.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0119.876] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0119.885] GetFileType (hFile=0x344) returned 0x1 [0119.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0119.885] GetFileType (hFile=0x344) returned 0x1 [0119.885] WriteFile (in: hFile=0x344, lpBuffer=0x26dbe50*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x26dbe50*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0119.886] CloseHandle (hObject=0x344) returned 1 [0119.887] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0119.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0119.887] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0119.888] GetFileType (hFile=0x344) returned 0x1 [0119.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0119.889] GetFileType (hFile=0x344) returned 0x1 [0119.889] WriteFile (in: hFile=0x344, lpBuffer=0x12a3bb68*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x12a3bb68*, lpNumberOfBytesWritten=0x12dd18*=0x91980, lpOverlapped=0x0) returned 1 [0119.905] CloseHandle (hObject=0x344) returned 1 [0119.912] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0119.912] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.SYMMYWARE", lpFilePart=0x0) returned 0x62 [0119.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0119.913] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfb4776c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x91980)) returned 1 [0119.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0119.913] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.symmyware")) returned 1 [0119.914] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0119.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0119.914] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0119.915] GetFileType (hFile=0x344) returned 0x1 [0119.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0119.915] GetFileType (hFile=0x344) returned 0x1 [0119.916] WriteFile (in: hFile=0x344, lpBuffer=0x26df530*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26df530*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0119.918] CloseHandle (hObject=0x344) returned 1 [0119.918] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0119.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0119.919] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0119.919] GetFileType (hFile=0x344) returned 0x1 [0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0119.920] GetFileType (hFile=0x344) returned 0x1 [0119.921] WriteFile (in: hFile=0x344, lpBuffer=0x26e2818*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x26e2818*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0119.923] CloseHandle (hObject=0x344) returned 1 [0119.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0119.924] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0119.924] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0119.924] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0120.189] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.189] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0120.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0120.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0120.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0120.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0120.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0120.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0120.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0120.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0120.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0120.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0120.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0120.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0120.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0120.192] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0120.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0120.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0120.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0120.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0120.194] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0120.194] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0120.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0120.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0120.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0120.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0120.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0120.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0120.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0120.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0120.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0120.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0120.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0120.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0120.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0120.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0120.201] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0120.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0120.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0120.202] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0120.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0120.203] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0120.210] GetFileType (hFile=0x344) returned 0x1 [0120.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0120.210] GetFileType (hFile=0x344) returned 0x1 [0120.210] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x10b2 [0120.210] ReadFile (in: hFile=0x344, lpBuffer=0x26e8fb0, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26e8fb0*, lpNumberOfBytesRead=0x12dd38*=0x10b2, lpOverlapped=0x0) returned 1 [0120.213] CloseHandle (hObject=0x344) returned 1 [0120.279] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0120.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0120.316] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0120.318] GetFileType (hFile=0x344) returned 0x1 [0120.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0120.318] GetFileType (hFile=0x344) returned 0x1 [0120.318] WriteFile (in: hFile=0x344, lpBuffer=0x273fd38*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x273fd38*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0120.319] CloseHandle (hObject=0x344) returned 1 [0120.320] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0120.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0120.320] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0120.321] GetFileType (hFile=0x344) returned 0x1 [0120.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0120.322] GetFileType (hFile=0x344) returned 0x1 [0120.322] WriteFile (in: hFile=0x344, lpBuffer=0x273d5e8*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x273d5e8*, lpNumberOfBytesWritten=0x12dd98*=0x10c0, lpOverlapped=0x0) returned 1 [0120.323] CloseHandle (hObject=0x344) returned 1 [0120.324] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0120.324] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0120.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0120.324] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfb5e5a20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0120.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0120.325] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.symmyware")) returned 1 [0120.325] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0120.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0120.326] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.336] GetFileType (hFile=0x344) returned 0x1 [0122.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.336] GetFileType (hFile=0x344) returned 0x1 [0122.336] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x41d4 [0122.336] ReadFile (in: hFile=0x344, lpBuffer=0x27413a0, nNumberOfBytesToRead=0x41d4, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27413a0*, lpNumberOfBytesRead=0x12dd38*=0x41d4, lpOverlapped=0x0) returned 1 [0122.448] CloseHandle (hObject=0x344) returned 1 [0122.455] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0122.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0122.455] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0122.457] GetFileType (hFile=0x344) returned 0x1 [0122.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0122.457] GetFileType (hFile=0x344) returned 0x1 [0122.457] WriteFile (in: hFile=0x344, lpBuffer=0x27aa9b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27aa9b0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0122.458] CloseHandle (hObject=0x344) returned 1 [0122.459] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0122.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.459] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.460] GetFileType (hFile=0x344) returned 0x1 [0122.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.460] GetFileType (hFile=0x344) returned 0x1 [0122.460] WriteFile (in: hFile=0x344, lpBuffer=0x27a5140*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27a5140*, lpNumberOfBytesWritten=0x12dd98*=0x41e0, lpOverlapped=0x0) returned 1 [0122.462] CloseHandle (hObject=0x344) returned 1 [0122.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0122.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0122.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0122.481] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb6a4100, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x41e0)) returned 1 [0122.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0122.481] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.symmyware")) returned 1 [0122.482] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0122.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.483] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.484] GetFileType (hFile=0x344) returned 0x1 [0122.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.485] GetFileType (hFile=0x344) returned 0x1 [0122.485] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x7976 [0122.485] ReadFile (in: hFile=0x344, lpBuffer=0x27abf90, nNumberOfBytesToRead=0x7976, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27abf90*, lpNumberOfBytesRead=0x12dd38*=0x7976, lpOverlapped=0x0) returned 1 [0122.510] CloseHandle (hObject=0x344) returned 1 [0122.518] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0122.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0122.519] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0122.520] GetFileType (hFile=0x344) returned 0x1 [0122.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0122.520] GetFileType (hFile=0x344) returned 0x1 [0122.520] WriteFile (in: hFile=0x344, lpBuffer=0x2829da8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2829da8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0122.521] CloseHandle (hObject=0x344) returned 1 [0122.521] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0122.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.522] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.522] GetFileType (hFile=0x344) returned 0x1 [0122.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.522] GetFileType (hFile=0x344) returned 0x1 [0122.523] WriteFile (in: hFile=0x344, lpBuffer=0x2820da8*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2820da8*, lpNumberOfBytesWritten=0x12dd98*=0x7980, lpOverlapped=0x0) returned 1 [0122.524] CloseHandle (hObject=0x344) returned 1 [0122.525] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0122.525] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0122.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0122.525] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfb70d0b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x7980)) returned 1 [0122.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0122.525] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0122.526] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0122.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0122.526] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0122.527] GetFileType (hFile=0x344) returned 0x1 [0122.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0122.527] GetFileType (hFile=0x344) returned 0x1 [0122.527] WriteFile (in: hFile=0x344, lpBuffer=0x282d3d0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x282d3d0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0122.528] CloseHandle (hObject=0x344) returned 1 [0122.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0122.529] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0122.529] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0122.529] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0122.546] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.546] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0122.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0122.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0122.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0122.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0122.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.548] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0122.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0122.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0122.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0122.549] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0122.549] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0122.549] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0122.550] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0122.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0122.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0122.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0122.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0122.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0122.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0122.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0122.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0122.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0122.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0122.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0122.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0122.650] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0122.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0122.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0122.651] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0122.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.651] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.652] GetFileType (hFile=0x344) returned 0x1 [0122.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.652] GetFileType (hFile=0x344) returned 0x1 [0122.652] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x10b2 [0122.652] ReadFile (in: hFile=0x344, lpBuffer=0x28337a0, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28337a0*, lpNumberOfBytesRead=0x12dd38*=0x10b2, lpOverlapped=0x0) returned 1 [0122.659] CloseHandle (hObject=0x344) returned 1 [0122.716] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0122.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0122.716] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0122.717] GetFileType (hFile=0x344) returned 0x1 [0122.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0122.717] GetFileType (hFile=0x344) returned 0x1 [0122.717] WriteFile (in: hFile=0x344, lpBuffer=0x26fcfe8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26fcfe8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0122.718] CloseHandle (hObject=0x344) returned 1 [0122.719] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0122.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.719] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.720] GetFileType (hFile=0x344) returned 0x1 [0122.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.720] GetFileType (hFile=0x344) returned 0x1 [0122.720] WriteFile (in: hFile=0x344, lpBuffer=0x26fa898*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26fa898*, lpNumberOfBytesWritten=0x12dd98*=0x10c0, lpOverlapped=0x0) returned 1 [0122.721] CloseHandle (hObject=0x344) returned 1 [0122.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0122.721] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0122.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0122.721] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xfb7fc4d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0122.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0122.722] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.symmyware")) returned 1 [0122.722] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0122.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0122.722] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0122.762] GetFileType (hFile=0x344) returned 0x1 [0122.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0122.763] GetFileType (hFile=0x344) returned 0x1 [0122.763] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1915 [0122.763] ReadFile (in: hFile=0x344, lpBuffer=0x26fe650, nNumberOfBytesToRead=0x1915, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26fe650*, lpNumberOfBytesRead=0x12dd38*=0x1915, lpOverlapped=0x0) returned 1 [0122.771] CloseHandle (hObject=0x344) returned 1 [0122.778] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0122.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0122.779] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0123.759] GetFileType (hFile=0x344) returned 0x1 [0123.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0123.759] GetFileType (hFile=0x344) returned 0x1 [0123.759] WriteFile (in: hFile=0x344, lpBuffer=0x2758420*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2758420*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0123.761] CloseHandle (hObject=0x344) returned 1 [0123.761] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0123.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0123.761] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0123.762] GetFileType (hFile=0x344) returned 0x1 [0123.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0123.763] GetFileType (hFile=0x344) returned 0x1 [0123.763] WriteFile (in: hFile=0x344, lpBuffer=0x2755470*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2755470*, lpNumberOfBytesWritten=0x12dd98*=0x1920, lpOverlapped=0x0) returned 1 [0123.764] CloseHandle (hObject=0x344) returned 1 [0123.765] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0123.765] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0123.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0123.765] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xfb8ee000, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1920)) returned 1 [0123.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0123.765] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.symmyware")) returned 1 [0123.766] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0123.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0123.766] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0123.767] GetFileType (hFile=0x344) returned 0x1 [0123.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0123.768] GetFileType (hFile=0x344) returned 0x1 [0123.768] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x412b [0123.768] ReadFile (in: hFile=0x344, lpBuffer=0x27599d8, nNumberOfBytesToRead=0x412b, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27599d8*, lpNumberOfBytesRead=0x12dd38*=0x412b, lpOverlapped=0x0) returned 1 [0123.805] CloseHandle (hObject=0x344) returned 1 [0123.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0123.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0123.812] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0123.813] GetFileType (hFile=0x344) returned 0x1 [0123.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0123.813] GetFileType (hFile=0x344) returned 0x1 [0123.813] WriteFile (in: hFile=0x344, lpBuffer=0x27c2610*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27c2610*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0123.814] CloseHandle (hObject=0x344) returned 1 [0123.815] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0123.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0123.815] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0123.816] GetFileType (hFile=0x344) returned 0x1 [0123.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0123.816] GetFileType (hFile=0x344) returned 0x1 [0123.816] WriteFile (in: hFile=0x344, lpBuffer=0x27bce60*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27bce60*, lpNumberOfBytesWritten=0x12dd98*=0x4130, lpOverlapped=0x0) returned 1 [0123.817] CloseHandle (hObject=0x344) returned 1 [0123.818] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0123.818] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0123.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0123.819] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xfb96cf40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4130)) returned 1 [0123.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0123.819] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0123.819] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0123.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0123.819] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0123.820] GetFileType (hFile=0x344) returned 0x1 [0123.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0123.820] GetFileType (hFile=0x344) returned 0x1 [0123.820] WriteFile (in: hFile=0x344, lpBuffer=0x27c5c38*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27c5c38*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0123.821] CloseHandle (hObject=0x344) returned 1 [0123.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0123.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0123.822] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0123.822] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0123.912] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.912] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0123.912] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0123.912] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0123.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0123.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0123.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0123.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0123.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.914] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0123.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0123.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0123.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0123.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0123.916] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0123.916] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0123.917] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.917] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0123.920] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0123.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0123.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0123.921] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0123.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0123.921] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0123.923] GetFileType (hFile=0x344) returned 0x1 [0123.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0123.923] GetFileType (hFile=0x344) returned 0x1 [0123.923] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x10b2 [0123.923] ReadFile (in: hFile=0x344, lpBuffer=0x27cbef0, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27cbef0*, lpNumberOfBytesRead=0x12dd38*=0x10b2, lpOverlapped=0x0) returned 1 [0125.583] CloseHandle (hObject=0x344) returned 1 [0125.646] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0125.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0125.646] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0125.648] GetFileType (hFile=0x344) returned 0x1 [0125.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0125.648] GetFileType (hFile=0x344) returned 0x1 [0125.648] WriteFile (in: hFile=0x344, lpBuffer=0x2822898*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2822898*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0125.649] CloseHandle (hObject=0x344) returned 1 [0125.650] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0125.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0125.650] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0125.651] GetFileType (hFile=0x344) returned 0x1 [0125.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0125.651] GetFileType (hFile=0x344) returned 0x1 [0125.651] WriteFile (in: hFile=0x344, lpBuffer=0x2820148*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2820148*, lpNumberOfBytesWritten=0x12dd98*=0x10c0, lpOverlapped=0x0) returned 1 [0125.652] CloseHandle (hObject=0x344) returned 1 [0125.652] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0125.653] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x57 [0125.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0125.653] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0xfbab41a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0125.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0125.653] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.symmyware")) returned 1 [0125.654] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0125.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0125.654] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0125.654] GetFileType (hFile=0x344) returned 0x1 [0125.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0125.654] GetFileType (hFile=0x344) returned 0x1 [0125.655] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5061 [0125.655] ReadFile (in: hFile=0x344, lpBuffer=0x2823ef0, nNumberOfBytesToRead=0x5061, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2823ef0*, lpNumberOfBytesRead=0x12dd38*=0x5061, lpOverlapped=0x0) returned 1 [0126.187] CloseHandle (hObject=0x344) returned 1 [0126.195] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0126.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0126.195] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.197] GetFileType (hFile=0x344) returned 0x1 [0126.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0126.197] GetFileType (hFile=0x344) returned 0x1 [0126.197] WriteFile (in: hFile=0x344, lpBuffer=0x28926a8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28926a8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0126.198] CloseHandle (hObject=0x344) returned 1 [0126.199] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0126.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0126.199] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0126.200] GetFileType (hFile=0x344) returned 0x1 [0126.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0126.200] GetFileType (hFile=0x344) returned 0x1 [0126.200] WriteFile (in: hFile=0x344, lpBuffer=0x288bfb8*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x288bfb8*, lpNumberOfBytesWritten=0x12dd98*=0x5070, lpOverlapped=0x0) returned 1 [0126.201] CloseHandle (hObject=0x344) returned 1 [0126.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0126.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0126.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0126.203] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0xfbb5c8f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5070)) returned 1 [0126.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0126.203] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.symmyware")) returned 1 [0126.204] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0126.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0126.204] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0126.207] GetFileType (hFile=0x344) returned 0x1 [0126.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0126.207] GetFileType (hFile=0x344) returned 0x1 [0126.207] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x2213 [0126.207] ReadFile (in: hFile=0x344, lpBuffer=0x2893c40, nNumberOfBytesToRead=0x2213, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2893c40*, lpNumberOfBytesRead=0x12dd38*=0x2213, lpOverlapped=0x0) returned 1 [0126.250] CloseHandle (hObject=0x344) returned 1 [0126.310] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0126.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0126.311] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.312] GetFileType (hFile=0x344) returned 0x1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0126.312] GetFileType (hFile=0x344) returned 0x1 [0126.312] WriteFile (in: hFile=0x344, lpBuffer=0x26f6818*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26f6818*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0126.313] CloseHandle (hObject=0x344) returned 1 [0126.313] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0126.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0126.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0126.314] GetFileType (hFile=0x344) returned 0x1 [0126.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0126.315] GetFileType (hFile=0x344) returned 0x1 [0126.315] WriteFile (in: hFile=0x344, lpBuffer=0x26f2f70*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26f2f70*, lpNumberOfBytesWritten=0x12dd98*=0x2220, lpOverlapped=0x0) returned 1 [0126.316] CloseHandle (hObject=0x344) returned 1 [0126.322] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0126.323] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0126.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0126.323] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0xfbc70700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x2220)) returned 1 [0126.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0126.323] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.SYMMYWARE" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.symmyware")) returned 1 [0126.324] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0126.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0126.324] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.325] GetFileType (hFile=0x344) returned 0x1 [0126.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0126.325] GetFileType (hFile=0x344) returned 0x1 [0126.326] WriteFile (in: hFile=0x344, lpBuffer=0x26f9e58*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x26f9e58*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0126.327] CloseHandle (hObject=0x344) returned 1 [0126.327] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x23 [0126.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0126.327] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\all users\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.328] GetFileType (hFile=0x344) returned 0x1 [0126.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0126.328] GetFileType (hFile=0x344) returned 0x1 [0126.329] WriteFile (in: hFile=0x344, lpBuffer=0x26fd090*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x26fd090*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0126.497] CloseHandle (hObject=0x344) returned 1 [0126.498] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x19 [0126.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0126.498] CreateFileW (lpFileName="C:\\MSOCache\\SYMMYWARE.TXT" (normalized: "c:\\msocache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.498] GetFileType (hFile=0x344) returned 0x1 [0126.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0126.499] GetFileType (hFile=0x344) returned 0x1 [0126.500] WriteFile (in: hFile=0x344, lpBuffer=0x27002a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dde8, lpOverlapped=0x0 | out: lpBuffer=0x27002a8*, lpNumberOfBytesWritten=0x12dde8*=0x4aa, lpOverlapped=0x0) returned 1 [0126.501] CloseHandle (hObject=0x344) returned 1 [0126.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0126.502] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0126.502] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0126.502] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.503] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.503] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0126.504] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0126.504] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0126.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0126.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0126.504] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0126.505] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0126.505] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0126.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.506] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0126.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0126.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0126.507] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0126.507] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0126.507] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0126.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0126.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0126.508] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0126.508] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0126.508] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0126.509] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0126.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0126.509] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1f [0126.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0126.509] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\SYMMYWARE.TXT" (normalized: "c:\\perflogs\\admin\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.511] GetFileType (hFile=0x344) returned 0x1 [0126.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0126.511] GetFileType (hFile=0x344) returned 0x1 [0126.512] WriteFile (in: hFile=0x344, lpBuffer=0x2706258*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2706258*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0126.513] CloseHandle (hObject=0x344) returned 1 [0126.513] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x19 [0126.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0126.513] CreateFileW (lpFileName="C:\\PerfLogs\\SYMMYWARE.TXT" (normalized: "c:\\perflogs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.514] GetFileType (hFile=0x344) returned 0x1 [0126.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0126.514] GetFileType (hFile=0x344) returned 0x1 [0126.515] WriteFile (in: hFile=0x344, lpBuffer=0x2709470*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dde8, lpOverlapped=0x0 | out: lpBuffer=0x2709470*, lpNumberOfBytesWritten=0x12dde8*=0x4aa, lpOverlapped=0x0) returned 1 [0126.516] CloseHandle (hObject=0x344) returned 1 [0126.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0126.517] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0126.517] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0126.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0126.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0126.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0126.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0126.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0126.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0126.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0126.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0126.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0126.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0126.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0126.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0126.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0126.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0126.522] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0126.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0126.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0126.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0126.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0126.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.523] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.523] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0126.523] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0126.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0126.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0126.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0126.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0126.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0126.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0126.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0126.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0126.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0126.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0126.526] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0126.526] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.526] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0126.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0126.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0126.527] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0126.527] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0126.527] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0126.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0126.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0126.528] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0126.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0126.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0126.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0126.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0126.529] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0126.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0126.530] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.530] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0126.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0126.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0126.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0126.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0126.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.533] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.533] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0126.534] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0126.534] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0126.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0126.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0126.534] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.535] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.535] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0126.535] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.535] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0126.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0126.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0126.536] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.536] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.536] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0126.537] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0126.537] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0126.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0126.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0126.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0126.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0126.537] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0126.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.538] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0126.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0126.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0126.539] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0126.539] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0126.539] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0126.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0126.642] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0126.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0126.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0126.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0126.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0126.643] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0126.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.643] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0126.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0126.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0126.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0126.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0126.644] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0126.645] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.645] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0126.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0126.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0126.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0126.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0126.645] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.646] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.646] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0126.646] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0126.646] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0126.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0126.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0126.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0126.647] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.647] GetFileType (hFile=0x344) returned 0x1 [0126.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0126.647] GetFileType (hFile=0x344) returned 0x1 [0126.648] WriteFile (in: hFile=0x344, lpBuffer=0x27193a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27193a8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0126.649] CloseHandle (hObject=0x344) returned 1 [0126.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0126.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0126.649] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.653] GetFileType (hFile=0x344) returned 0x1 [0126.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0126.653] GetFileType (hFile=0x344) returned 0x1 [0126.654] WriteFile (in: hFile=0x344, lpBuffer=0x271c640*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x271c640*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0126.655] CloseHandle (hObject=0x344) returned 1 [0126.655] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0126.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0126.655] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.655] GetFileType (hFile=0x344) returned 0x1 [0126.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0126.655] GetFileType (hFile=0x344) returned 0x1 [0126.656] WriteFile (in: hFile=0x344, lpBuffer=0x271f8a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x271f8a8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0126.657] CloseHandle (hObject=0x344) returned 1 [0126.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0126.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0126.658] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\acrobat\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0126.658] GetFileType (hFile=0x344) returned 0x1 [0126.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0126.658] GetFileType (hFile=0x344) returned 0x1 [0126.659] WriteFile (in: hFile=0x344, lpBuffer=0x2722b00*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2722b00*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0126.660] CloseHandle (hObject=0x344) returned 1 [0126.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0126.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0126.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0126.660] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0126.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0 [0126.661] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0126.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0126.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0126.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0126.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0126.661] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0126.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0126.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.662] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0126.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0126.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0126.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0126.662] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0126.662] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0126.662] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0127.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0127.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0127.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.469] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0127.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0127.471] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0127.477] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0127.478] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0127.478] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0 [0127.478] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0127.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0127.480] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0127.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0127.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0127.490] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\arm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0127.492] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x22 [0127.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0127.492] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\adobe\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0127.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.493] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0127.493] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\", lpFilePart=0x0) returned 0x20 [0127.494] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0127.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0127.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0127.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0127.499] CreateFileW (lpFileName="C:\\ProgramData\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.659] GetFileType (hFile=0x344) returned 0x1 [0127.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0127.659] GetFileType (hFile=0x344) returned 0x1 [0127.660] WriteFile (in: hFile=0x344, lpBuffer=0x2734a18*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2734a18*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.661] CloseHandle (hObject=0x344) returned 1 [0127.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0127.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\", lpFilePart=0x0) returned 0x17 [0127.661] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0127.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0127.664] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0127.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0127.664] CreateFileW (lpFileName="C:\\ProgramData\\Desktop\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\desktop\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.666] GetFileType (hFile=0x344) returned 0x1 [0127.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0127.666] GetFileType (hFile=0x344) returned 0x1 [0127.667] WriteFile (in: hFile=0x344, lpBuffer=0x2738e58*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2738e58*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.668] CloseHandle (hObject=0x344) returned 1 [0127.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0127.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\", lpFilePart=0x0) returned 0x19 [0127.669] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0127.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0127.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0127.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0127.673] CreateFileW (lpFileName="C:\\ProgramData\\Documents\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.682] GetFileType (hFile=0x344) returned 0x1 [0127.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0127.682] GetFileType (hFile=0x344) returned 0x1 [0127.683] WriteFile (in: hFile=0x344, lpBuffer=0x273d2c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x273d2c0*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.684] CloseHandle (hObject=0x344) returned 1 [0127.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0127.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\", lpFilePart=0x0) returned 0x19 [0127.685] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0127.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0127.687] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0127.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0127.687] CreateFileW (lpFileName="C:\\ProgramData\\Favorites\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\favorites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.697] GetFileType (hFile=0x344) returned 0x1 [0127.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0127.698] GetFileType (hFile=0x344) returned 0x1 [0127.698] WriteFile (in: hFile=0x344, lpBuffer=0x2741728*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2741728*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.699] CloseHandle (hObject=0x344) returned 1 [0127.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.699] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0127.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0127.700] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0127.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0127.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0127.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0127.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0127.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0127.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0127.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0127.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0127.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0127.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0127.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0127.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0127.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0127.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0127.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0127.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0127.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0127.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0127.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0127.706] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0127.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0127.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0127.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0127.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0127.706] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0127.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0127.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0127.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0127.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0127.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0127.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0127.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0127.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0127.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0127.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0127.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0127.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.711] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0127.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0127.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0127.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0127.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0127.711] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0127.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0127.712] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0127.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0127.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0127.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0127.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0127.713] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0127.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.713] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0127.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0127.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0127.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0127.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0127.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0127.715] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0127.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0127.715] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0127.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.716] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0127.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0127.716] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0127.717] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0127.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0127.718] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0127.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.719] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0127.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0127.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0127.719] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0127.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0127.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0127.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0127.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0127.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0127.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0127.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.879] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0127.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0127.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0127.880] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0127.880] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0127.880] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0127.884] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0127.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0127.885] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.886] GetFileType (hFile=0x344) returned 0x1 [0127.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0127.886] GetFileType (hFile=0x344) returned 0x1 [0127.887] WriteFile (in: hFile=0x344, lpBuffer=0x2753f48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2753f48*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.888] CloseHandle (hObject=0x344) returned 1 [0127.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0127.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0127.898] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.900] GetFileType (hFile=0x344) returned 0x1 [0127.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0127.900] GetFileType (hFile=0x344) returned 0x1 [0127.901] WriteFile (in: hFile=0x344, lpBuffer=0x27571f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27571f0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.902] CloseHandle (hObject=0x344) returned 1 [0127.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0127.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0127.902] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.903] GetFileType (hFile=0x344) returned 0x1 [0127.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0127.904] GetFileType (hFile=0x344) returned 0x1 [0127.905] WriteFile (in: hFile=0x344, lpBuffer=0x275a488*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x275a488*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.906] CloseHandle (hObject=0x344) returned 1 [0127.907] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0127.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0127.907] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\assistance\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.908] GetFileType (hFile=0x344) returned 0x1 [0127.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0127.908] GetFileType (hFile=0x344) returned 0x1 [0127.909] WriteFile (in: hFile=0x344, lpBuffer=0x275d700*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x275d700*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.911] CloseHandle (hObject=0x344) returned 1 [0127.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0127.911] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0127.911] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0127.911] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0127.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0127.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0127.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0127.921] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0127.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0127.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0127.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0127.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0127.922] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0127.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0127.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0127.924] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.924] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0127.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0127.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0127.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0127.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.925] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.925] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0127.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0127.926] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0127.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0127.927] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0127.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.928] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0127.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0127.929] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.930] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0127.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0127.930] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.930] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.931] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.931] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.931] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0127.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0127.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.936] GetFileType (hFile=0x344) returned 0x1 [0127.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0127.936] GetFileType (hFile=0x344) returned 0x1 [0127.937] WriteFile (in: hFile=0x344, lpBuffer=0x2766498*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2766498*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.938] CloseHandle (hObject=0x344) returned 1 [0127.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0127.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0127.938] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.939] GetFileType (hFile=0x344) returned 0x1 [0127.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0127.939] GetFileType (hFile=0x344) returned 0x1 [0127.940] WriteFile (in: hFile=0x344, lpBuffer=0x2769710*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2769710*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.941] CloseHandle (hObject=0x344) returned 1 [0127.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0127.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0127.942] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.959] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.959] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.960] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.960] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0127.960] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0127.960] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.961] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.961] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.961] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.962] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0127.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0127.962] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0127.963] WriteFile (in: hFile=0x344, lpBuffer=0x276e3b8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x276e3b8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0127.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0127.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.966] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0127.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0127.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0127.967] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0127.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0127.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0127.968] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0127.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0127.969] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.969] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0127.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0127.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0127.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0127.969] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.970] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.971] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0127.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0127.971] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.972] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.975] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0127.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0127.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0127.976] WriteFile (in: hFile=0x344, lpBuffer=0x2775348*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2775348*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.978] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0127.978] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0127.978] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0127.982] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.982] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0127.982] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0127.982] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0127.983] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0127.983] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.983] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0127.983] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0127.984] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 0 [0127.984] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0127.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0127.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0127.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3a [0127.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0127.984] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0127.992] WriteFile (in: hFile=0x344, lpBuffer=0x277af30*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x277af30*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.994] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0127.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0127.994] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0127.995] WriteFile (in: hFile=0x344, lpBuffer=0x277e1a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x277e1a8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0127.997] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0127.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0127.997] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\crypto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0127.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0127.998] WriteFile (in: hFile=0x344, lpBuffer=0x2781410*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2781410*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0127.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0128.000] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0128.000] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0128.000] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0128.000] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0128.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0128.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0128.001] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0128.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0128.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0128.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0128.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0128.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0128.002] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0128.002] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0128.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0128.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.003] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0128.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0128.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0128.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0128.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0128.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0128.004] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0128.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0128.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0128.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0128.008] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0128.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0128.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0128.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0128.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0128.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0128.008] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0128.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.009] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0128.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0128.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0128.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0128.010] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0128.010] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0128.010] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0129.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0129.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.609] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0129.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0129.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0129.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0129.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0129.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0129.610] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0129.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0129.612] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0129.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0129.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0129.613] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0129.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0129.613] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0129.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0129.616] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1fad1 [0129.616] ReadFile (in: hFile=0x344, lpBuffer=0x12acd520, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12acd520*, lpNumberOfBytesRead=0x12dc38*=0x1fad1, lpOverlapped=0x0) returned 1 [0129.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0129.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0129.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0129.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0129.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0129.840] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0129.857] GetFileType (hFile=0x344) returned 0x1 [0129.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0129.857] GetFileType (hFile=0x344) returned 0x1 [0129.857] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xb61 [0129.857] ReadFile (in: hFile=0x344, lpBuffer=0x27db1b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27db1b0*, lpNumberOfBytesRead=0x12dc38*=0xb61, lpOverlapped=0x0) returned 1 [0129.859] CloseHandle (hObject=0x344) returned 1 [0129.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0129.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0129.923] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0129.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0129.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0129.927] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0129.927] GetFileType (hFile=0x344) returned 0x1 [0129.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0129.927] GetFileType (hFile=0x344) returned 0x1 [0129.927] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xadc8 [0129.927] ReadFile (in: hFile=0x344, lpBuffer=0x282f8d8, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x282f8d8*, lpNumberOfBytesRead=0x12dc38*=0xadc8, lpOverlapped=0x0) returned 1 [0129.930] CloseHandle (hObject=0x344) returned 1 [0129.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0129.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0129.989] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0129.994] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0129.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0129.994] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0129.994] GetFileType (hFile=0x344) returned 0x1 [0129.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0129.994] GetFileType (hFile=0x344) returned 0x1 [0129.994] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x70c1 [0129.995] ReadFile (in: hFile=0x344, lpBuffer=0x28aabd8, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28aabd8*, lpNumberOfBytesRead=0x12dc38*=0x70c1, lpOverlapped=0x0) returned 1 [0130.005] CloseHandle (hObject=0x344) returned 1 [0130.109] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0130.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0130.109] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0130.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0130.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0130.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0130.148] GetFileType (hFile=0x344) returned 0x1 [0130.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0130.148] GetFileType (hFile=0x344) returned 0x1 [0130.148] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x99d3 [0130.148] ReadFile (in: hFile=0x344, lpBuffer=0x2732878, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2732878*, lpNumberOfBytesRead=0x12dc38*=0x99d3, lpOverlapped=0x0) returned 1 [0130.151] CloseHandle (hObject=0x344) returned 1 [0130.221] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0130.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0130.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0130.230] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0130.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0130.230] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0130.231] GetFileType (hFile=0x344) returned 0x1 [0130.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0130.231] GetFileType (hFile=0x344) returned 0x1 [0130.232] WriteFile (in: hFile=0x344, lpBuffer=0x27be288*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27be288*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0130.233] CloseHandle (hObject=0x344) returned 1 [0130.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0130.233] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0130.233] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0130.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0130.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0130.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0130.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.235] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0130.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0130.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0130.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0130.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0130.236] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0130.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0130.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0130.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0130.238] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0130.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0130.238] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0130.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0130.238] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0130.238] GetFileType (hFile=0x344) returned 0x1 [0130.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0130.238] GetFileType (hFile=0x344) returned 0x1 [0130.239] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1fad1 [0130.239] ReadFile (in: hFile=0x344, lpBuffer=0x12727330, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12727330*, lpNumberOfBytesRead=0x12dc38*=0x1fad1, lpOverlapped=0x0) returned 1 [0130.244] CloseHandle (hObject=0x344) returned 1 [0130.540] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0130.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0130.540] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0130.543] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0130.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0130.543] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0130.543] GetFileType (hFile=0x344) returned 0x1 [0130.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0130.543] GetFileType (hFile=0x344) returned 0x1 [0130.543] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x769 [0130.544] ReadFile (in: hFile=0x344, lpBuffer=0x28129c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28129c8*, lpNumberOfBytesRead=0x12dc38*=0x769, lpOverlapped=0x0) returned 1 [0130.546] CloseHandle (hObject=0x344) returned 1 [0130.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0130.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0130.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0130.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0130.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0130.717] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0130.718] GetFileType (hFile=0x344) returned 0x1 [0130.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0130.718] GetFileType (hFile=0x344) returned 0x1 [0130.718] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x70c1 [0130.718] ReadFile (in: hFile=0x344, lpBuffer=0x2865ae0, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2865ae0*, lpNumberOfBytesRead=0x12dc38*=0x70c1, lpOverlapped=0x0) returned 1 [0130.720] CloseHandle (hObject=0x344) returned 1 [0130.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0130.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0130.854] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0130.858] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0130.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0130.859] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0130.883] GetFileType (hFile=0x344) returned 0x1 [0130.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0130.883] GetFileType (hFile=0x344) returned 0x1 [0130.884] WriteFile (in: hFile=0x344, lpBuffer=0x28e1ca8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x28e1ca8*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0130.885] CloseHandle (hObject=0x344) returned 1 [0130.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3a [0130.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0130.886] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0130.890] GetFileType (hFile=0x344) returned 0x1 [0130.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0130.891] GetFileType (hFile=0x344) returned 0x1 [0130.892] WriteFile (in: hFile=0x344, lpBuffer=0x28e4f40*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28e4f40*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0130.893] CloseHandle (hObject=0x344) returned 1 [0130.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0130.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0130.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0130.893] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0130.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0130.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0130.895] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0130.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0130.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0130.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0130.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0130.895] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.895] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.896] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0130.896] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0130.896] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.896] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0130.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0130.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0130.896] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0130.896] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0130.896] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.915] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.915] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0130.915] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0130.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0130.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0130.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0130.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0130.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0130.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0130.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0130.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.920] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0130.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0130.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0130.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0130.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0130.922] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0130.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0130.925] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0130.925] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0130.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0130.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0130.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0130.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0130.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0130.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0130.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0130.927] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0130.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0130.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0130.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x5c [0130.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0130.928] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0130.930] GetFileType (hFile=0x344) returned 0x1 [0130.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0130.931] GetFileType (hFile=0x344) returned 0x1 [0130.931] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xd0a3 [0130.932] ReadFile (in: hFile=0x344, lpBuffer=0x28ed750, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28ed750*, lpNumberOfBytesRead=0x12dc38*=0xd0a3, lpOverlapped=0x0) returned 1 [0130.935] CloseHandle (hObject=0x344) returned 1 [0131.021] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x5c [0131.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.021] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.025] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x5c [0131.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.026] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.026] GetFileType (hFile=0x344) returned 0x1 [0131.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.026] GetFileType (hFile=0x344) returned 0x1 [0131.027] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x72ee [0131.027] ReadFile (in: hFile=0x344, lpBuffer=0x27828c0, nNumberOfBytesToRead=0x72ee, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27828c0*, lpNumberOfBytesRead=0x12dc38*=0x72ee, lpOverlapped=0x0) returned 1 [0131.029] CloseHandle (hObject=0x344) returned 1 [0131.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x5c [0131.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x5e [0131.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.078] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.079] GetFileType (hFile=0x344) returned 0x1 [0131.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.079] GetFileType (hFile=0x344) returned 0x1 [0131.079] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x14668 [0131.079] ReadFile (in: hFile=0x344, lpBuffer=0x27fd810, nNumberOfBytesToRead=0x14668, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27fd810*, lpNumberOfBytesRead=0x12dc38*=0x14668, lpOverlapped=0x0) returned 1 [0131.096] CloseHandle (hObject=0x344) returned 1 [0131.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x5e [0131.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.183] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0131.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.188] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.191] GetFileType (hFile=0x344) returned 0x1 [0131.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.191] GetFileType (hFile=0x344) returned 0x1 [0131.191] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x536 [0131.191] ReadFile (in: hFile=0x344, lpBuffer=0x289f2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x289f2f0*, lpNumberOfBytesRead=0x12dc38*=0x536, lpOverlapped=0x0) returned 1 [0131.193] CloseHandle (hObject=0x344) returned 1 [0131.265] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0131.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.265] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x5f [0131.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.269] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.269] GetFileType (hFile=0x344) returned 0x1 [0131.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.269] GetFileType (hFile=0x344) returned 0x1 [0131.269] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xcaa9 [0131.270] ReadFile (in: hFile=0x344, lpBuffer=0x28f1908, nNumberOfBytesToRead=0xcaa9, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28f1908*, lpNumberOfBytesRead=0x12dc38*=0xcaa9, lpOverlapped=0x0) returned 1 [0131.273] CloseHandle (hObject=0x344) returned 1 [0131.396] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x5f [0131.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.396] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.400] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x5e [0131.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.401] GetFileType (hFile=0x344) returned 0x1 [0131.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.401] GetFileType (hFile=0x344) returned 0x1 [0131.401] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x10850 [0131.401] ReadFile (in: hFile=0x344, lpBuffer=0x2773628, nNumberOfBytesToRead=0x10850, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2773628*, lpNumberOfBytesRead=0x12dc38*=0x10850, lpOverlapped=0x0) returned 1 [0131.404] CloseHandle (hObject=0x344) returned 1 [0131.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x5e [0131.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.474] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5a [0131.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.474] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.474] GetFileType (hFile=0x344) returned 0x1 [0131.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.474] GetFileType (hFile=0x344) returned 0x1 [0131.474] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xc04b [0131.474] ReadFile (in: hFile=0x344, lpBuffer=0x2805550, nNumberOfBytesToRead=0xc04b, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2805550*, lpNumberOfBytesRead=0x12dc38*=0xc04b, lpOverlapped=0x0) returned 1 [0131.477] CloseHandle (hObject=0x344) returned 1 [0131.546] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5a [0131.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.546] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0131.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.552] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.555] GetFileType (hFile=0x344) returned 0x1 [0131.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.555] GetFileType (hFile=0x344) returned 0x1 [0131.555] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x3473 [0131.555] ReadFile (in: hFile=0x344, lpBuffer=0x2885240, nNumberOfBytesToRead=0x3473, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2885240*, lpNumberOfBytesRead=0x12dc38*=0x3473, lpOverlapped=0x0) returned 1 [0131.558] CloseHandle (hObject=0x344) returned 1 [0131.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0131.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0131.651] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0131.847] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x59 [0131.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0131.905] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0131.905] GetFileType (hFile=0x344) returned 0x1 [0131.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0131.905] GetFileType (hFile=0x344) returned 0x1 [0131.905] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1b9f4 [0131.906] ReadFile (in: hFile=0x344, lpBuffer=0x1287aab8, nNumberOfBytesToRead=0x1b9f4, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x1287aab8*, lpNumberOfBytesRead=0x12dc38*=0x1b9f4, lpOverlapped=0x0) returned 1 [0131.909] CloseHandle (hObject=0x344) returned 1 [0132.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x59 [0132.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.088] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0132.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0132.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", lpFilePart=0x0) returned 0x58 [0132.091] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0132.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.093] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0132.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0132.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0132.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0132.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", lpFilePart=0x0) returned 0x58 [0132.093] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0132.094] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0132.094] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0132.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0132.094] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0132.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0132.094] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.094] GetFileType (hFile=0x344) returned 0x1 [0132.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0132.095] GetFileType (hFile=0x344) returned 0x1 [0132.095] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x536 [0132.095] ReadFile (in: hFile=0x344, lpBuffer=0x26f3000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x26f3000*, lpNumberOfBytesRead=0x12dbb8*=0x536, lpOverlapped=0x0) returned 1 [0132.096] CloseHandle (hObject=0x344) returned 1 [0132.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0132.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0132.177] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0132.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0132.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0132.183] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0132.184] GetFileType (hFile=0x344) returned 0x1 [0132.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0132.184] GetFileType (hFile=0x344) returned 0x1 [0132.185] WriteFile (in: hFile=0x344, lpBuffer=0x27490e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27490e0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0132.186] CloseHandle (hObject=0x344) returned 1 [0132.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0132.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0132.186] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0132.187] GetFileType (hFile=0x344) returned 0x1 [0132.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0132.187] GetFileType (hFile=0x344) returned 0x1 [0132.187] WriteFile (in: hFile=0x344, lpBuffer=0x274c408*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x274c408*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0132.188] CloseHandle (hObject=0x344) returned 1 [0132.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0132.189] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0132.189] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0132.189] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0132.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0132.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0132.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0132.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0132.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0132.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0132.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0132.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0132.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0132.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0132.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0132.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0132.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0132.201] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0132.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0132.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0132.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0132.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0132.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0132.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0132.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0132.205] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0132.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0132.206] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x5c [0132.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.206] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.208] GetFileType (hFile=0x344) returned 0x1 [0132.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.208] GetFileType (hFile=0x344) returned 0x1 [0132.208] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xd0a3 [0132.208] ReadFile (in: hFile=0x344, lpBuffer=0x2752280, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2752280*, lpNumberOfBytesRead=0x12dc38*=0xd0a3, lpOverlapped=0x0) returned 1 [0132.210] CloseHandle (hObject=0x344) returned 1 [0132.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x5c [0132.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.261] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x60 [0132.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.270] GetFileType (hFile=0x344) returned 0x1 [0132.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.270] GetFileType (hFile=0x344) returned 0x1 [0132.270] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xe3c8 [0132.270] ReadFile (in: hFile=0x344, lpBuffer=0x27d6118, nNumberOfBytesToRead=0xe3c8, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27d6118*, lpNumberOfBytesRead=0x12dc38*=0xe3c8, lpOverlapped=0x0) returned 1 [0132.273] CloseHandle (hObject=0x344) returned 1 [0132.321] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x60 [0132.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.324] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x64 [0132.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.324] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.324] GetFileType (hFile=0x344) returned 0x1 [0132.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.324] GetFileType (hFile=0x344) returned 0x1 [0132.324] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xebb8 [0132.325] ReadFile (in: hFile=0x344, lpBuffer=0x285ec50, nNumberOfBytesToRead=0xebb8, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x285ec50*, lpNumberOfBytesRead=0x12dc38*=0xebb8, lpOverlapped=0x0) returned 1 [0132.327] CloseHandle (hObject=0x344) returned 1 [0132.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x64 [0132.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.425] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x61 [0132.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.432] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.434] GetFileType (hFile=0x344) returned 0x1 [0132.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.434] GetFileType (hFile=0x344) returned 0x1 [0132.434] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xdff5 [0132.435] ReadFile (in: hFile=0x344, lpBuffer=0x272b5a0, nNumberOfBytesToRead=0xdff5, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x272b5a0*, lpNumberOfBytesRead=0x12dc38*=0xdff5, lpOverlapped=0x0) returned 1 [0132.438] CloseHandle (hObject=0x344) returned 1 [0132.548] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x61 [0132.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.548] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.556] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5b [0132.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.556] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.557] GetFileType (hFile=0x344) returned 0x1 [0132.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.557] GetFileType (hFile=0x344) returned 0x1 [0132.557] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xec75 [0132.558] ReadFile (in: hFile=0x344, lpBuffer=0x27b3360, nNumberOfBytesToRead=0xec75, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27b3360*, lpNumberOfBytesRead=0x12dc38*=0xec75, lpOverlapped=0x0) returned 1 [0132.561] CloseHandle (hObject=0x344) returned 1 [0132.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5b [0132.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.653] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x63 [0132.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.657] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.658] GetFileType (hFile=0x344) returned 0x1 [0132.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.658] GetFileType (hFile=0x344) returned 0x1 [0132.658] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x10654 [0132.658] ReadFile (in: hFile=0x344, lpBuffer=0x283e130, nNumberOfBytesToRead=0x10654, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x283e130*, lpNumberOfBytesRead=0x12dc38*=0x10654, lpOverlapped=0x0) returned 1 [0132.661] CloseHandle (hObject=0x344) returned 1 [0132.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x63 [0132.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.758] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x63 [0132.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.763] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.763] GetFileType (hFile=0x344) returned 0x1 [0132.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.763] GetFileType (hFile=0x344) returned 0x1 [0132.763] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xf8c2 [0132.763] ReadFile (in: hFile=0x344, lpBuffer=0x28cf6b0, nNumberOfBytesToRead=0xf8c2, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28cf6b0*, lpNumberOfBytesRead=0x12dc38*=0xf8c2, lpOverlapped=0x0) returned 1 [0132.765] CloseHandle (hObject=0x344) returned 1 [0132.821] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x63 [0132.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.821] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0132.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0132.824] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.825] GetFileType (hFile=0x344) returned 0x1 [0132.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0132.825] GetFileType (hFile=0x344) returned 0x1 [0132.825] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x2c64 [0132.826] ReadFile (in: hFile=0x344, lpBuffer=0x295d5d0, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x295d5d0*, lpNumberOfBytesRead=0x12dc38*=0x2c64, lpOverlapped=0x0) returned 1 [0132.828] CloseHandle (hObject=0x344) returned 1 [0132.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0132.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0132.947] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0132.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0132.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0132.951] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", lpFilePart=0x0) returned 0x58 [0132.951] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.952] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.952] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0132.952] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.952] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0132.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0132.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0132.953] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0132.953] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", lpFilePart=0x0) returned 0x58 [0132.953] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0132.953] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.953] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0132.953] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0132.954] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0132.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0132.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0132.954] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0132.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0132.954] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0132.954] GetFileType (hFile=0x344) returned 0x1 [0132.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0132.955] GetFileType (hFile=0x344) returned 0x1 [0132.955] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x5e8 [0132.955] ReadFile (in: hFile=0x344, lpBuffer=0x275c1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x275c1e8*, lpNumberOfBytesRead=0x12dbb8*=0x5e8, lpOverlapped=0x0) returned 1 [0132.957] CloseHandle (hObject=0x344) returned 1 [0133.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0133.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0133.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0133.016] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0133.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0133.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.017] GetFileType (hFile=0x344) returned 0x1 [0133.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0133.017] GetFileType (hFile=0x344) returned 0x1 [0133.018] WriteFile (in: hFile=0x344, lpBuffer=0x27b0e88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27b0e88*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.020] CloseHandle (hObject=0x344) returned 1 [0133.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0133.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.020] GetFileType (hFile=0x344) returned 0x1 [0133.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.021] GetFileType (hFile=0x344) returned 0x1 [0133.021] WriteFile (in: hFile=0x344, lpBuffer=0x27b41b0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27b41b0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.023] CloseHandle (hObject=0x344) returned 1 [0133.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0133.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.023] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.026] GetFileType (hFile=0x344) returned 0x1 [0133.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.026] GetFileType (hFile=0x344) returned 0x1 [0133.027] WriteFile (in: hFile=0x344, lpBuffer=0x27b7448*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27b7448*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.029] CloseHandle (hObject=0x344) returned 1 [0133.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0133.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\device stage\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.030] GetFileType (hFile=0x344) returned 0x1 [0133.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.030] GetFileType (hFile=0x344) returned 0x1 [0133.031] WriteFile (in: hFile=0x344, lpBuffer=0x27ba6c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27ba6c0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.033] CloseHandle (hObject=0x344) returned 1 [0133.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0133.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0133.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.051] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0133.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0133.052] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.053] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0133.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.054] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\devicesync\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.054] GetFileType (hFile=0x344) returned 0x1 [0133.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.054] GetFileType (hFile=0x344) returned 0x1 [0133.055] WriteFile (in: hFile=0x344, lpBuffer=0x27bf348*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27bf348*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.057] CloseHandle (hObject=0x344) returned 1 [0133.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0133.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0133.058] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0133.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0133.059] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0133.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0133.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0133.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.064] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0133.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0133.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.066] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.066] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0133.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0133.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.067] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0133.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\drm\\server\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.068] GetFileType (hFile=0x344) returned 0x1 [0133.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.068] GetFileType (hFile=0x344) returned 0x1 [0133.069] WriteFile (in: hFile=0x344, lpBuffer=0x27c5af8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27c5af8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.070] CloseHandle (hObject=0x344) returned 1 [0133.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0133.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.071] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\drm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.080] GetFileType (hFile=0x344) returned 0x1 [0133.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.080] GetFileType (hFile=0x344) returned 0x1 [0133.081] WriteFile (in: hFile=0x344, lpBuffer=0x27c8d50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27c8d50*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.082] CloseHandle (hObject=0x344) returned 1 [0133.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0133.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0133.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0133.084] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0133.084] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0133.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0133.084] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.085] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.085] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0133.085] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.085] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0133.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0133.086] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.086] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.086] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.087] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0133.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0133.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.088] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0133.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.089] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.089] GetFileType (hFile=0x344) returned 0x1 [0133.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.089] GetFileType (hFile=0x344) returned 0x1 [0133.090] WriteFile (in: hFile=0x344, lpBuffer=0x27cf590*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27cf590*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.091] CloseHandle (hObject=0x344) returned 1 [0133.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2c [0133.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.092] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\ehome\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.092] GetFileType (hFile=0x344) returned 0x1 [0133.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.093] GetFileType (hFile=0x344) returned 0x1 [0133.093] WriteFile (in: hFile=0x344, lpBuffer=0x27d27f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27d27f8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.095] CloseHandle (hObject=0x344) returned 1 [0133.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0133.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0133.095] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0133.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0133.115] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0133.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0133.115] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0133.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.117] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0133.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0133.117] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0133.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0133.119] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0133.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0133.119] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0133.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.120] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.121] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0133.121] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0133.121] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.122] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.122] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0133.122] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0133.122] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.123] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0133.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.124] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.124] GetFileType (hFile=0x344) returned 0x1 [0133.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.124] GetFileType (hFile=0x344) returned 0x1 [0133.125] WriteFile (in: hFile=0x344, lpBuffer=0x27db938*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27db938*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.126] CloseHandle (hObject=0x344) returned 1 [0133.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0133.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.138] GetFileType (hFile=0x344) returned 0x1 [0133.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.138] GetFileType (hFile=0x344) returned 0x1 [0133.138] WriteFile (in: hFile=0x344, lpBuffer=0x27debd0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27debd0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.139] CloseHandle (hObject=0x344) returned 1 [0133.140] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0133.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.140] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\event viewer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.140] GetFileType (hFile=0x344) returned 0x1 [0133.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.141] GetFileType (hFile=0x344) returned 0x1 [0133.141] WriteFile (in: hFile=0x344, lpBuffer=0x27e1e48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27e1e48*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.142] CloseHandle (hObject=0x344) returned 1 [0133.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.143] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0133.143] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0133.143] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0133.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0133.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.144] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.146] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0133.146] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0133.146] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.146] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0133.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0133.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0133.147] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.148] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0133.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.148] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\identitycrl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.149] GetFileType (hFile=0x344) returned 0x1 [0133.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.149] GetFileType (hFile=0x344) returned 0x1 [0133.150] WriteFile (in: hFile=0x344, lpBuffer=0x27e7218*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27e7218*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.151] CloseHandle (hObject=0x344) returned 1 [0133.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.152] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0133.152] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0133.152] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.152] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.153] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.153] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.153] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0133.153] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0133.153] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.154] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.154] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.154] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0133.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\media player\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0133.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0133.157] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0133.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0133.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.159] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.159] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0133.159] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0133.159] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.159] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0133.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0133.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0133.160] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x29 [0133.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\mf\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.164] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0133.164] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0133.165] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0133.166] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0133.166] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0133.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0133.168] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.168] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0133.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.169] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.169] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0133.169] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0133.170] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.171] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.171] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0133.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0133.172] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.172] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.173] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.173] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0133.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.173] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2b [0133.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.176] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\msdn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0133.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0133.178] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0133.182] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0133.182] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.182] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0133.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0133.183] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0133.184] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.184] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0133.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0133.184] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.186] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0133.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0133.187] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.187] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.187] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.188] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0133.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.188] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0133.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.192] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\netframework\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0133.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0133.197] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0133.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0133.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0133.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0133.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0133.200] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0133.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0133.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.201] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0133.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0133.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.203] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0133.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0133.203] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3a [0133.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.205] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\network\\connections\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.208] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0133.208] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0133.208] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0133.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0133.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.209] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.209] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0133.209] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0133.209] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0133.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0133.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0133.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.210] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0133.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.210] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.212] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0133.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.212] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\network\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0133.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0133.214] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0133.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0133.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0133.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0133.227] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0133.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0133.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0133.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0133.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.230] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.231] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", lpFilePart=0x0) returned 0x30 [0133.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.231] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.234] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1536 [0133.234] ReadFile (in: hFile=0x344, lpBuffer=0x28184a0, nNumberOfBytesToRead=0x1536, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28184a0*, lpNumberOfBytesRead=0x12dd38*=0x1536, lpOverlapped=0x0) returned 1 [0133.293] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", lpFilePart=0x0) returned 0x30 [0133.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.294] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.295] GetFileType (hFile=0x344) returned 0x1 [0133.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.295] GetFileType (hFile=0x344) returned 0x1 [0133.296] WriteFile (in: hFile=0x344, lpBuffer=0x2870918*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2870918*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.297] CloseHandle (hObject=0x344) returned 1 [0133.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", lpFilePart=0x0) returned 0x30 [0133.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.297] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.298] GetFileType (hFile=0x344) returned 0x1 [0133.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.299] GetFileType (hFile=0x344) returned 0x1 [0133.299] WriteFile (in: hFile=0x344, lpBuffer=0x286dd78*, nNumberOfBytesToWrite=0x1540, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x286dd78*, lpNumberOfBytesWritten=0x12dd98*=0x1540, lpOverlapped=0x0) returned 1 [0133.300] CloseHandle (hObject=0x344) returned 1 [0133.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico", lpFilePart=0x0) returned 0x30 [0133.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.SYMMYWARE", lpFilePart=0x0) returned 0x3a [0133.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.303] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2430e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1 [0133.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.303] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico.symmyware")) returned 1 [0133.305] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", lpFilePart=0x0) returned 0x36 [0133.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.306] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.307] GetFileType (hFile=0x344) returned 0x1 [0133.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.307] GetFileType (hFile=0x344) returned 0x1 [0133.307] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x627e [0133.308] ReadFile (in: hFile=0x344, lpBuffer=0x2871d98, nNumberOfBytesToRead=0x627e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2871d98*, lpNumberOfBytesRead=0x12dd38*=0x627e, lpOverlapped=0x0) returned 1 [0133.310] CloseHandle (hObject=0x344) returned 1 [0133.323] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", lpFilePart=0x0) returned 0x36 [0133.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.324] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.325] GetFileType (hFile=0x344) returned 0x1 [0133.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.326] GetFileType (hFile=0x344) returned 0x1 [0133.326] WriteFile (in: hFile=0x344, lpBuffer=0x28e71a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28e71a0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.329] CloseHandle (hObject=0x344) returned 1 [0133.332] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", lpFilePart=0x0) returned 0x36 [0133.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.333] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.334] GetFileType (hFile=0x344) returned 0x1 [0133.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.334] GetFileType (hFile=0x344) returned 0x1 [0133.334] WriteFile (in: hFile=0x344, lpBuffer=0x28df8b0*, nNumberOfBytesToWrite=0x6280, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x28df8b0*, lpNumberOfBytesWritten=0x12dd98*=0x6280, lpOverlapped=0x0) returned 1 [0133.335] CloseHandle (hObject=0x344) returned 1 [0133.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico", lpFilePart=0x0) returned 0x36 [0133.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0133.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.337] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2939f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0133.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.337] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico.symmyware")) returned 1 [0133.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", lpFilePart=0x0) returned 0x31 [0133.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.341] GetFileType (hFile=0x344) returned 0x1 [0133.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.341] GetFileType (hFile=0x344) returned 0x1 [0133.341] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5532e [0133.342] ReadFile (in: hFile=0x344, lpBuffer=0x127d8700, nNumberOfBytesToRead=0x5532e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x127d8700*, lpNumberOfBytesRead=0x12dd38*=0x5532e, lpOverlapped=0x0) returned 1 [0133.348] CloseHandle (hObject=0x344) returned 1 [0133.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", lpFilePart=0x0) returned 0x31 [0133.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.425] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.430] GetFileType (hFile=0x344) returned 0x1 [0133.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.430] GetFileType (hFile=0x344) returned 0x1 [0133.430] WriteFile (in: hFile=0x344, lpBuffer=0x2736838*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2736838*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.432] CloseHandle (hObject=0x344) returned 1 [0133.432] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", lpFilePart=0x0) returned 0x31 [0133.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.432] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.434] GetFileType (hFile=0x344) returned 0x1 [0133.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.434] GetFileType (hFile=0x344) returned 0x1 [0133.434] WriteFile (in: hFile=0x344, lpBuffer=0x12a22660*, nNumberOfBytesToWrite=0x55330, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x12a22660*, lpNumberOfBytesWritten=0x12dd98*=0x55330, lpOverlapped=0x0) returned 1 [0133.445] CloseHandle (hObject=0x344) returned 1 [0133.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico", lpFilePart=0x0) returned 0x31 [0133.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0133.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.449] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe39dbc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x55330)) returned 1 [0133.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.450] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico.symmyware")) returned 1 [0133.451] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", lpFilePart=0x0) returned 0x2a [0133.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.451] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.453] GetFileType (hFile=0x344) returned 0x1 [0133.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.454] GetFileType (hFile=0x344) returned 0x1 [0133.454] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x627e [0133.454] ReadFile (in: hFile=0x344, lpBuffer=0x2737c88, nNumberOfBytesToRead=0x627e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2737c88*, lpNumberOfBytesRead=0x12dd38*=0x627e, lpOverlapped=0x0) returned 1 [0133.456] CloseHandle (hObject=0x344) returned 1 [0133.495] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", lpFilePart=0x0) returned 0x2a [0133.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.496] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.497] GetFileType (hFile=0x344) returned 0x1 [0133.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.498] GetFileType (hFile=0x344) returned 0x1 [0133.498] WriteFile (in: hFile=0x344, lpBuffer=0x27ad248*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27ad248*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.499] CloseHandle (hObject=0x344) returned 1 [0133.500] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", lpFilePart=0x0) returned 0x2a [0133.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.501] GetFileType (hFile=0x344) returned 0x1 [0133.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.502] GetFileType (hFile=0x344) returned 0x1 [0133.502] WriteFile (in: hFile=0x344, lpBuffer=0x27a5988*, nNumberOfBytesToWrite=0x6280, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27a5988*, lpNumberOfBytesWritten=0x12dd98*=0x6280, lpOverlapped=0x0) returned 1 [0133.504] CloseHandle (hObject=0x344) returned 1 [0133.505] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico", lpFilePart=0x0) returned 0x2a [0133.505] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.SYMMYWARE", lpFilePart=0x0) returned 0x34 [0133.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.506] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe421920, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0133.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.506] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico.symmyware")) returned 1 [0133.507] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", lpFilePart=0x0) returned 0x38 [0133.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.508] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.547] GetFileType (hFile=0x344) returned 0x1 [0133.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.547] GetFileType (hFile=0x344) returned 0x1 [0133.547] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x627e [0133.547] ReadFile (in: hFile=0x344, lpBuffer=0x27ae698, nNumberOfBytesToRead=0x627e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27ae698*, lpNumberOfBytesRead=0x12dd38*=0x627e, lpOverlapped=0x0) returned 1 [0133.550] CloseHandle (hObject=0x344) returned 1 [0133.560] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", lpFilePart=0x0) returned 0x38 [0133.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.560] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.562] GetFileType (hFile=0x344) returned 0x1 [0133.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.563] GetFileType (hFile=0x344) returned 0x1 [0133.563] WriteFile (in: hFile=0x344, lpBuffer=0x2823ab0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2823ab0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.564] CloseHandle (hObject=0x344) returned 1 [0133.565] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", lpFilePart=0x0) returned 0x38 [0133.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.565] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.566] GetFileType (hFile=0x344) returned 0x1 [0133.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.567] GetFileType (hFile=0x344) returned 0x1 [0133.567] WriteFile (in: hFile=0x344, lpBuffer=0x281c1b0*, nNumberOfBytesToWrite=0x6280, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x281c1b0*, lpNumberOfBytesWritten=0x12dd98*=0x6280, lpOverlapped=0x0) returned 1 [0133.569] CloseHandle (hObject=0x344) returned 1 [0133.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", lpFilePart=0x0) returned 0x38 [0133.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.SYMMYWARE", lpFilePart=0x0) returned 0x42 [0133.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.571] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4bb610, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0133.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.571] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico.symmyware")) returned 1 [0133.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", lpFilePart=0x0) returned 0x36 [0133.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.573] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.575] GetFileType (hFile=0x344) returned 0x1 [0133.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.575] GetFileType (hFile=0x344) returned 0x1 [0133.575] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x627e [0133.575] ReadFile (in: hFile=0x344, lpBuffer=0x2824f80, nNumberOfBytesToRead=0x627e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2824f80*, lpNumberOfBytesRead=0x12dd38*=0x627e, lpOverlapped=0x0) returned 1 [0133.614] CloseHandle (hObject=0x344) returned 1 [0133.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", lpFilePart=0x0) returned 0x36 [0133.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0133.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.627] GetFileType (hFile=0x344) returned 0x1 [0133.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0133.628] GetFileType (hFile=0x344) returned 0x1 [0133.628] WriteFile (in: hFile=0x344, lpBuffer=0x289a388*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x289a388*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0133.629] CloseHandle (hObject=0x344) returned 1 [0133.629] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", lpFilePart=0x0) returned 0x36 [0133.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0133.630] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0133.631] GetFileType (hFile=0x344) returned 0x1 [0133.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0133.631] GetFileType (hFile=0x344) returned 0x1 [0133.631] WriteFile (in: hFile=0x344, lpBuffer=0x2892a98*, nNumberOfBytesToWrite=0x6280, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2892a98*, lpNumberOfBytesWritten=0x12dd98*=0x6280, lpOverlapped=0x0) returned 1 [0133.633] CloseHandle (hObject=0x344) returned 1 [0133.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", lpFilePart=0x0) returned 0x36 [0133.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0133.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.634] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4fd4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280)) returned 1 [0133.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0133.635] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.SYMMYWARE" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico.symmyware")) returned 1 [0133.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0133.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0133.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.637] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.637] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0133.638] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0133.638] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0133.638] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0133.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0133.639] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0133.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0133.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.641] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0133.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0133.642] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0133.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0133.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0133.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0133.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0133.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0133.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0133.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0133.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0133.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0133.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0133.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0133.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0133.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0133.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0133.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0133.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0133.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0133.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0133.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0133.654] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0133.654] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0133.655] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0133.655] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0133.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0133.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0133.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0133.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.657] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0133.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0133.659] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0133.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0133.663] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0133.664] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0133.664] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0133.665] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0133.666] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0133.666] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0133.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0133.668] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0133.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0133.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0133.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0133.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0133.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0133.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0133.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0133.673] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0133.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0133.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0133.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0133.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0133.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0133.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0133.676] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.678] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0133.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.678] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.681] GetFileType (hFile=0x344) returned 0x1 [0133.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.681] GetFileType (hFile=0x344) returned 0x1 [0133.681] WriteFile (in: hFile=0x344, lpBuffer=0x28a8f90*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x28a8f90*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.683] CloseHandle (hObject=0x344) returned 1 [0133.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0133.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0133.684] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.686] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.688] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0133.689] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0133.689] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0133.689] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0133.690] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0133.690] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0133.690] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0133.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0133.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0133.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0133.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0133.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0133.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0133.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0133.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0133.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0133.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0133.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0133.694] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0133.694] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0133.694] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0133.694] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0133.694] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0133.695] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0133.695] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0133.695] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0133.695] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0133.696] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.696] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0133.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0133.697] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.699] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.699] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0133.699] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0133.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0133.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0133.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0133.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0133.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0133.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0133.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0133.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0133.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0133.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0133.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0133.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0133.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0133.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0133.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0133.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0133.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0133.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0133.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0133.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0133.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0133.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0133.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0133.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0133.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0133.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0133.706] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0133.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0133.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.710] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0133.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\office\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0133.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0133.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0133.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0133.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.715] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0133.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0133.715] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0133.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0133.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0133.716] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0133.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0133.717] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0133.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.717] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0133.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0133.718] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0133.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0 [0133.719] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0133.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.719] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.721] WriteFile (in: hFile=0x344, lpBuffer=0x28c3918*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28c3918*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x47 [0133.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.723] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.724] WriteFile (in: hFile=0x344, lpBuffer=0x28c6be0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28c6be0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0133.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0133.726] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0133.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0133.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0133.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0133.728] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0133.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0133.729] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.729] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.729] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0133.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0133.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0133.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.730] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.731] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0133.731] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0133.731] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.732] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0133.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0133.733] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.734] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0133.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.734] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0133.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0133.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe33f1ec0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0133.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.737] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0133.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0133.738] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.738] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe33f1ec0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0133.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe33f1ec0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0 [0133.739] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0133.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0133.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0133.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbddb7d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0133.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0133.744] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.744] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0133.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0133.744] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe23e0a40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe23e0a40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbddb7d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0133.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0133.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 0 [0133.745] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0133.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.746] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0133.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0133.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34fc860, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xe34fc860, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe34fc860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql9C4E.tmp", cAlternateFileName="")) returned 1 [0133.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35229c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe3548b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql9C5E.tmp", cAlternateFileName="")) returned 1 [0133.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.751] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0133.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0133.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe35229c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe34fc860, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xe34fc860, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe34fc860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql9C4E.tmp", cAlternateFileName="")) returned 1 [0133.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35229c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe3548b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql9C5E.tmp", cAlternateFileName="")) returned 1 [0133.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35229c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xe35229c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe3548b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql9C5E.tmp", cAlternateFileName="")) returned 0 [0133.753] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0133.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.754] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0133.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.756] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\rac\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0133.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0133.769] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0133.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0133.770] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0133.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0133.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0133.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.771] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0133.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0133.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0133.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0133.772] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0133.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0133.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0133.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.773] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0133.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0133.774] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0133.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0133.776] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0133.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0133.776] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0133.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.777] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.777] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0133.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.777] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.779] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0133.779] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0133.779] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.780] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0133.780] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0133.780] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0133.780] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.781] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.781] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0133.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0133.781] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0133.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0133.781] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0133.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0133.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.803] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\search\\data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0133.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.805] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\search\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0133.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0133.808] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0133.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.808] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0133.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0133.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.809] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.900] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1 [0133.900] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0133.901] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0133.901] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0133.901] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0133.901] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0133.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0133.902] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0133.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0133.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0133.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0133.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.908] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.910] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0133.910] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0133.910] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.911] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.913] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0133.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0133.919] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0133.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.921] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0133.921] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x1f [0133.921] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.922] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0133.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x1f [0133.922] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.923] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2c [0133.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x1e [0133.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x1f [0133.950] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.952] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.953] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.954] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x1e [0133.955] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x1f [0133.955] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.956] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.957] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2c [0133.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.957] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\visio\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.958] GetFileType (hFile=0x344) returned 0x1 [0133.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.958] GetFileType (hFile=0x344) returned 0x1 [0133.960] WriteFile (in: hFile=0x344, lpBuffer=0x26c7020*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x26c7020*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.961] CloseHandle (hObject=0x344) returned 1 [0133.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.961] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0133.961] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x21 [0133.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0133.965] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0133.965] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0133.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0133.966] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x21 [0133.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.966] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0133.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.967] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0133.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0133.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0133.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2a [0133.968] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.969] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.969] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.970] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0133.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0133.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2a [0133.970] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0133.971] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0133.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0133.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0133.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0133.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0133.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a500) returned 1 [0133.977] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0133.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0133.978] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\wwansvc\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.978] GetFileType (hFile=0x344) returned 0x1 [0133.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0133.978] GetFileType (hFile=0x344) returned 0x1 [0133.979] WriteFile (in: hFile=0x344, lpBuffer=0x26ce5d0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x26ce5d0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0133.980] CloseHandle (hObject=0x344) returned 1 [0133.981] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0133.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0133.981] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0133.981] GetFileType (hFile=0x344) returned 0x1 [0133.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0133.982] GetFileType (hFile=0x344) returned 0x1 [0133.983] WriteFile (in: hFile=0x344, lpBuffer=0x26d1818*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x26d1818*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0133.984] CloseHandle (hObject=0x344) returned 1 [0133.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0133.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0133.985] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0133.985] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0133.990] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.993] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0133.993] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0133.994] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0133.994] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0133.994] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0133.995] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0133.995] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0133.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0133.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0133.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0133.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0133.997] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0133.997] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0133.997] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0133.998] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0133.998] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0133.998] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0133.999] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0133.999] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0133.999] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0134.000] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0134.000] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0134.000] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0134.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0134.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0134.002] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0134.002] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0134.002] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0134.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0134.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0134.003] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.003] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0134.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0134.005] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.006] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0134.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0134.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0134.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0134.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0134.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0134.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0134.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0134.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0134.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0134.009] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0134.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0134.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0134.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0134.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0134.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0134.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0134.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0134.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0134.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0134.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0134.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0134.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0134.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0134.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0134.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0134.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0134.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0134.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0134.015] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0134.015] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0134.016] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.017] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2b [0134.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.017] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\microsoft help\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.019] GetFileType (hFile=0x344) returned 0x1 [0134.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.019] GetFileType (hFile=0x344) returned 0x1 [0134.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.021] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0134.021] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0134.021] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0134.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0134.022] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0134.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0134.023] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0134.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.024] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.024] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0134.024] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0134.024] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0134.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.027] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0134.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0134.027] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.028] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0134.028] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0134.028] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x29 [0134.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.029] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\mozilla\\logs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.029] GetFileType (hFile=0x344) returned 0x1 [0134.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.029] GetFileType (hFile=0x344) returned 0x1 [0134.031] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0134.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.031] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\mozilla\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.031] GetFileType (hFile=0x344) returned 0x1 [0134.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.031] GetFileType (hFile=0x344) returned 0x1 [0134.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0134.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0134.033] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.034] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0134.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0134.035] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.037] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.037] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x23 [0134.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.037] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\oracle\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.037] GetFileType (hFile=0x344) returned 0x1 [0134.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.038] GetFileType (hFile=0x344) returned 0x1 [0134.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0134.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0134.039] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0134.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0134.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0134.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0134.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0134.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0134.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0134.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0134.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0134.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0134.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0134.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0134.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0134.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0134.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0134.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0134.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0134.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0134.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0134.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0134.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0134.049] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0134.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0134.051] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0134.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0134.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0134.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0134.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0134.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0134.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0134.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0134.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0134.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0134.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0134.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0134.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0134.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0134.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.056] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0134.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0134.058] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.059] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0134.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0134.060] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.061] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.061] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0134.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0134.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0134.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0134.062] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0134.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0134.062] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0134.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.063] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0134.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0134.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0134.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0134.064] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0134.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0134.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0134.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.065] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0134.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0134.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.066] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.066] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0134.066] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.066] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0134.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0134.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0134.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0134.067] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0134.068] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0134.073] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0134.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.073] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.075] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0134.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.077] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0134.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0134.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.080] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.081] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.081] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0134.081] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0134.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.082] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0134.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0134.083] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0134.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0134.083] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0134.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0134.084] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.084] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.085] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0134.085] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.085] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0134.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0134.085] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0134.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0134.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.088] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0134.089] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0134.089] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0134.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.089] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.089] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0134.090] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0134.090] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.090] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.090] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0134.090] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.090] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0134.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0134.091] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.091] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.091] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0134.091] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0134.091] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0134.092] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0134.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0134.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.094] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.095] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0134.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.097] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.099] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.099] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.099] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.099] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.100] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.100] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.101] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0134.103] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.103] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.104] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0134.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0134.104] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.105] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0134.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0134.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0134.106] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.106] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7a [0134.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.106] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.110] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.110] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.112] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0134.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0134.114] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0134.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.115] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0134.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0134.115] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0134.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0134.116] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0134.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.116] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.120] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.120] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.120] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.121] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.122] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.122] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.122] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.123] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.123] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.123] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.123] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0134.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0134.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.124] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0134.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.125] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0134.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0134.125] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.126] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0134.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0134.127] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0134.127] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.128] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7f [0134.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.128] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.132] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.132] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.134] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0134.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0134.136] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0134.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.138] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0134.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0134.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.138] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0134.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0134.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0134.139] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.139] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0134.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.139] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.144] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.144] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.144] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.145] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0134.145] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.145] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.145] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.145] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.145] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.145] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0134.146] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.146] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.146] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.146] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.146] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.147] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0134.147] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.147] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.147] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.147] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0134.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.148] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.148] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0134.148] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0134.149] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.149] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.150] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0134.150] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0134.150] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0134.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0134.151] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0134.151] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.151] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7b [0134.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.151] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.155] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0134.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.157] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.158] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.159] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.160] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.160] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.160] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.161] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.161] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.162] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.162] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.162] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.162] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0134.162] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x71 [0134.162] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.163] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.163] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0134.163] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x71 [0134.164] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.164] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.164] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7e [0134.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.170] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0134.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.172] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.173] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.174] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.174] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.175] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.175] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.176] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.177] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0134.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x70 [0134.177] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.178] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0134.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x70 [0134.178] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.178] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.179] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7d [0134.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.185] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0134.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.187] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.187] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.187] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.188] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.192] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.193] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.193] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.193] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.194] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0134.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0134.194] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.194] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0134.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0134.195] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.195] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7f [0134.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.202] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0134.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0134.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.203] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.203] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.203] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0134.203] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0134.204] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0134.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0134.204] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0134.205] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0134.205] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.205] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.205] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7c [0134.209] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.211] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.212] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.212] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.212] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.214] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.214] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.214] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.214] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.215] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.216] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.216] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0134.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x70 [0134.216] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.217] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.217] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0134.217] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x70 [0134.217] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.218] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.218] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7d [0134.221] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.222] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.223] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.223] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.223] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.224] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.224] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.224] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.224] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.224] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.224] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.225] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.225] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.226] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.226] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.227] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0134.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0134.227] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.228] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0134.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0134.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.228] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.229] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7a [0134.231] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.233] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.234] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0134.234] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x44 [0134.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.236] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0134.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x44 [0134.236] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.236] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0134.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.239] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.242] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0134.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0134.242] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.242] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.242] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.242] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.243] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0134.243] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0134.243] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.243] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0134.243] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0134.243] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.243] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0134.244] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x6f [0134.244] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.244] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.244] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7c [0134.247] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0134.248] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.249] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.250] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.250] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.250] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.250] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x4f [0134.250] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0134.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.251] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.251] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.251] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.253] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0134.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0134.253] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.253] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0134.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x73 [0134.254] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.254] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.254] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0134.254] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x73 [0134.254] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.255] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.255] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x80 [0134.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0134.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x43 [0134.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpFilePart=0x0) returned 0x44 [0134.261] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.262] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x43 [0134.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.263] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.267] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.268] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.269] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.276] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.277] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.277] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.277] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.281] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.281] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.283] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.283] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.290] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0134.293] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0134.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.294] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\start menu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.295] GetFileType (hFile=0x344) returned 0x1 [0134.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.295] GetFileType (hFile=0x344) returned 0x1 [0134.296] WriteFile (in: hFile=0x344, lpBuffer=0x2824d88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2824d88*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.297] CloseHandle (hObject=0x344) returned 1 [0134.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0134.298] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\", lpFilePart=0x0) returned 0x13 [0134.298] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0134.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0134.299] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.300] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun", lpFilePart=0x0) returned 0x12 [0134.300] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\", lpFilePart=0x0) returned 0x13 [0134.300] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0134.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.301] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.301] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0134.301] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\", lpFilePart=0x0) returned 0x18 [0134.301] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0134.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0134.303] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java", lpFilePart=0x0) returned 0x17 [0134.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\", lpFilePart=0x0) returned 0x18 [0134.303] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.303] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0134.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.304] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0134.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x24 [0134.305] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0134.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.306] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.306] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x23 [0134.306] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x24 [0134.306] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0134.308] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0 [0134.308] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.308] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0134.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.308] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.309] GetFileType (hFile=0x344) returned 0x1 [0134.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0134.309] GetFileType (hFile=0x344) returned 0x1 [0134.309] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x77 [0134.309] ReadFile (in: hFile=0x344, lpBuffer=0x282b1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x282b1b8*, lpNumberOfBytesRead=0x12dcb8*=0x77, lpOverlapped=0x0) returned 1 [0134.311] CloseHandle (hObject=0x344) returned 1 [0134.363] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0134.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0134.364] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.365] GetFileType (hFile=0x344) returned 0x1 [0134.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0134.365] GetFileType (hFile=0x344) returned 0x1 [0134.365] WriteFile (in: hFile=0x344, lpBuffer=0x287cab0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x287cab0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0134.366] CloseHandle (hObject=0x344) returned 1 [0134.366] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0134.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.366] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.367] GetFileType (hFile=0x344) returned 0x1 [0134.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0134.367] GetFileType (hFile=0x344) returned 0x1 [0134.367] WriteFile (in: hFile=0x344, lpBuffer=0x287dc08*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x287dc08*, lpNumberOfBytesWritten=0x12dbc8*=0x80, lpOverlapped=0x0) returned 1 [0134.369] CloseHandle (hObject=0x344) returned 1 [0134.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0134.370] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.SYMMYWARE", lpFilePart=0x0) returned 0x3c [0134.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.370] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfebf5f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0134.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0134.370] MoveFileW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.SYMMYWARE" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.symmyware")) returned 1 [0134.371] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0134.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0134.371] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\sun\\java\\java update\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.372] GetFileType (hFile=0x344) returned 0x1 [0134.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0134.372] GetFileType (hFile=0x344) returned 0x1 [0134.372] WriteFile (in: hFile=0x344, lpBuffer=0x2880fd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2880fd8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.373] CloseHandle (hObject=0x344) returned 1 [0134.373] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x25 [0134.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0134.374] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\sun\\java\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.374] GetFileType (hFile=0x344) returned 0x1 [0134.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0134.374] GetFileType (hFile=0x344) returned 0x1 [0134.375] WriteFile (in: hFile=0x344, lpBuffer=0x2884220*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2884220*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.376] CloseHandle (hObject=0x344) returned 1 [0134.376] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x20 [0134.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.377] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\sun\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.377] GetFileType (hFile=0x344) returned 0x1 [0134.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.377] GetFileType (hFile=0x344) returned 0x1 [0134.378] WriteFile (in: hFile=0x344, lpBuffer=0x2887458*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2887458*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.379] CloseHandle (hObject=0x344) returned 1 [0134.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.379] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0134.379] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\", lpFilePart=0x0) returned 0x19 [0134.379] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0134.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0134.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0134.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.383] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\templates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.384] GetFileType (hFile=0x344) returned 0x1 [0134.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.384] GetFileType (hFile=0x344) returned 0x1 [0134.385] WriteFile (in: hFile=0x344, lpBuffer=0x288b8c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x288b8c0*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.386] CloseHandle (hObject=0x344) returned 1 [0134.386] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1c [0134.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0134.386] CreateFileW (lpFileName="C:\\ProgramData\\SYMMYWARE.TXT" (normalized: "c:\\programdata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.386] GetFileType (hFile=0x344) returned 0x1 [0134.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0134.387] GetFileType (hFile=0x344) returned 0x1 [0134.387] WriteFile (in: hFile=0x344, lpBuffer=0x288eae8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dde8, lpOverlapped=0x0 | out: lpBuffer=0x288eae8*, lpNumberOfBytesWritten=0x12dde8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.388] CloseHandle (hObject=0x344) returned 1 [0134.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0134.388] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0134.388] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0134.389] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0134.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0 [0134.390] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0134.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0134.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0134.390] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0134.391] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0134.391] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.391] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.391] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0134.391] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0134.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0134.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.392] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0134.392] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0134.392] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.392] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.392] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0134.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0134.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.393] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.393] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0134.393] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0134.393] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.394] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0134.394] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0134.394] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0134.394] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.395] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0134.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0134.395] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\SYMMYWARE.TXT" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.395] GetFileType (hFile=0x344) returned 0x1 [0134.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0134.395] GetFileType (hFile=0x344) returned 0x1 [0134.396] WriteFile (in: hFile=0x344, lpBuffer=0x2895ad0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2895ad0*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.397] CloseHandle (hObject=0x344) returned 1 [0134.397] GetFullPathNameW (in: lpFileName="C:\\Recovery\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x19 [0134.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0134.397] CreateFileW (lpFileName="C:\\Recovery\\SYMMYWARE.TXT" (normalized: "c:\\recovery\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.397] GetFileType (hFile=0x344) returned 0x1 [0134.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0134.397] GetFileType (hFile=0x344) returned 0x1 [0134.398] WriteFile (in: hFile=0x344, lpBuffer=0x2898ce8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dde8, lpOverlapped=0x0 | out: lpBuffer=0x2898ce8*, lpNumberOfBytesWritten=0x12dde8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.399] CloseHandle (hObject=0x344) returned 1 [0134.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0134.399] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0134.399] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\", lpFilePart=0x0) returned 0x1d [0134.399] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0134.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de20) returned 1 [0134.402] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0134.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0134.402] CreateFileW (lpFileName="C:\\System Volume Information\\SYMMYWARE.TXT" (normalized: "c:\\system volume information\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a680) returned 1 [0134.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0134.405] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0134.405] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0134.405] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf962b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.407] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf962b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0134.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0134.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0134.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0134.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0134.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0134.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf962b130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf9632660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0134.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.409] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0134.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0134.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12def0) returned 1 [0134.410] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x12d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0134.410] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x12d980, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0134.410] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x12db90 | out: lpFindFileData=0x12db90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf962b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf962b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0134.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0134.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0134.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0134.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0134.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0134.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf962b130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf9632660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0134.412] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dbe0 | out: lpFindFileData=0x12dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf962b130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xf962b130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xf9632660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0134.412] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de40) returned 1 [0134.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12de00) returned 1 [0134.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0134.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0134.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.412] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0134.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0134.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0134.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0134.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0134.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0134.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0134.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0134.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0134.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0134.416] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb1d4280, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb1d4280, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0134.416] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0134.416] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0134.417] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0134.417] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0134.417] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0134.417] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0134.417] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0134.418] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0134.418] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0134.418] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb40f720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb40f720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0134.418] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0134.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0134.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0134.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0134.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0134.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0134.420] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0134.420] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb3771a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb3771a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0134.420] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb3771a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb3771a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0134.420] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0134.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0134.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0134.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.421] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.421] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0134.421] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0134.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb1d4280, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb1d4280, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0134.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0134.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0134.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0134.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0134.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0134.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0134.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0134.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb40f720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb40f720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0134.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0134.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0134.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0134.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0134.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0134.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0134.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0134.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb3771a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb3771a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0134.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.428] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0134.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0134.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0134.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0134.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.429] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.430] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0134.430] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0134.430] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0134.431] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0134.431] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0134.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0134.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0134.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.432] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.432] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0134.433] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0134.433] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0134.433] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.433] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0134.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0134.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0134.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0134.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.434] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.434] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0134.434] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0134.435] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0134.435] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0134.435] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0134.435] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0134.436] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0134.436] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0134.436] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0134.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0134.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0134.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0134.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0134.438] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0134.438] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0134.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0134.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0134.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0134.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0134.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0134.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0134.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0134.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0134.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0134.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0134.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0134.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0134.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0134.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0134.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0134.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.443] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0134.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0134.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0134.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0134.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0134.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0134.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0134.445] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0134.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0134.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0134.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0134.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.446] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0134.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0134.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.447] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.447] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0134.447] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0134.447] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0134.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0134.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0134.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.448] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0134.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0134.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0134.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.451] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0134.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0134.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0134.453] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0134.453] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0134.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0134.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0134.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.457] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0134.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0134.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0134.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0134.459] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0134.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0134.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0134.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0134.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0134.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x47 [0134.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0134.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0134.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0134.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0134.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0134.466] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0134.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0134.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0134.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.467] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0134.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0134.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0134.474] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0134.474] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.474] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0134.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0134.474] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.475] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.475] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0134.475] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0134.476] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0134.476] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0134.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0134.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.477] GetFileType (hFile=0x344) returned 0x1 [0134.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0134.477] GetFileType (hFile=0x344) returned 0x1 [0134.477] WriteFile (in: hFile=0x344, lpBuffer=0x26c97b0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x26c97b0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.479] CloseHandle (hObject=0x344) returned 1 [0134.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0134.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0134.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.480] GetFileType (hFile=0x344) returned 0x1 [0134.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0134.480] GetFileType (hFile=0x344) returned 0x1 [0134.480] WriteFile (in: hFile=0x344, lpBuffer=0x26cca78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26cca78*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.482] CloseHandle (hObject=0x344) returned 1 [0134.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0134.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.483] GetFileType (hFile=0x344) returned 0x1 [0134.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.483] GetFileType (hFile=0x344) returned 0x1 [0134.483] WriteFile (in: hFile=0x344, lpBuffer=0x26cfd20*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26cfd20*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.485] CloseHandle (hObject=0x344) returned 1 [0134.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x3c [0134.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x3d [0134.485] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0134.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0134.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0134.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.491] GetFileType (hFile=0x344) returned 0x1 [0134.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.491] GetFileType (hFile=0x344) returned 0x1 [0134.492] WriteFile (in: hFile=0x344, lpBuffer=0x26d44e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26d44e8*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.493] CloseHandle (hObject=0x344) returned 1 [0134.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0134.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0134.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0134.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 0 [0134.495] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0134.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0134.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.496] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.497] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0134.497] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.497] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0134.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0134.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.499] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.499] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0134.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0134.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 0 [0134.500] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0134.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0134.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0134.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0134.503] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.503] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0134.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0134.503] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0134.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 0 [0134.506] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0134.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0134.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0134.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0134.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0134.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0134.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 0 [0134.510] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0134.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0134.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0134.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.511] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0134.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0134.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.512] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.512] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0134.512] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 0 [0134.512] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0134.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0134.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.513] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.513] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0134.513] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.514] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0134.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0134.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0134.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.515] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.515] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0134.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0134.516] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0134.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0134.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0134.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0134.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0134.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0134.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.517] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0134.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0134.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0134.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0134.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.518] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0134.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0134.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0134.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0134.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.519] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0134.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0134.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9d [0134.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0134.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.521] GetFileType (hFile=0x344) returned 0x1 [0134.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0134.521] GetFileType (hFile=0x344) returned 0x1 [0134.521] WriteFile (in: hFile=0x344, lpBuffer=0x26e9588*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d8e8, lpOverlapped=0x0 | out: lpBuffer=0x26e9588*, lpNumberOfBytesWritten=0x12d8e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.523] CloseHandle (hObject=0x344) returned 1 [0134.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0134.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0134.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.524] GetFileType (hFile=0x344) returned 0x1 [0134.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0134.524] GetFileType (hFile=0x344) returned 0x1 [0134.525] WriteFile (in: hFile=0x344, lpBuffer=0x26ec9a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d968, lpOverlapped=0x0 | out: lpBuffer=0x26ec9a0*, lpNumberOfBytesWritten=0x12d968*=0x4aa, lpOverlapped=0x0) returned 1 [0134.526] CloseHandle (hObject=0x344) returned 1 [0134.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0134.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.527] GetFileType (hFile=0x344) returned 0x1 [0134.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.528] GetFileType (hFile=0x344) returned 0x1 [0134.529] WriteFile (in: hFile=0x344, lpBuffer=0x26efcd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x26efcd8*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.530] CloseHandle (hObject=0x344) returned 1 [0134.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x54 [0134.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0134.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.531] GetFileType (hFile=0x344) returned 0x1 [0134.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.531] GetFileType (hFile=0x344) returned 0x1 [0134.532] WriteFile (in: hFile=0x344, lpBuffer=0x26f2fe0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26f2fe0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.533] CloseHandle (hObject=0x344) returned 1 [0134.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x47 [0134.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0134.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.534] GetFileType (hFile=0x344) returned 0x1 [0134.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0134.534] GetFileType (hFile=0x344) returned 0x1 [0134.535] WriteFile (in: hFile=0x344, lpBuffer=0x26f62a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x26f62a8*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.536] CloseHandle (hObject=0x344) returned 1 [0134.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0134.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0134.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.537] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0134.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 0 [0134.538] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0134.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0134.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0134.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.539] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0134.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0134.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0134.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0134.544] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0134.544] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 0 [0134.545] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0134.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0134.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0134.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0134.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0134.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.549] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0134.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0134.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0134.552] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.552] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0134.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0134.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0134.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 0 [0134.554] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0134.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.557] GetFileType (hFile=0x344) returned 0x1 [0134.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.557] GetFileType (hFile=0x344) returned 0x1 [0134.557] WriteFile (in: hFile=0x344, lpBuffer=0x2702760*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2702760*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.559] CloseHandle (hObject=0x344) returned 1 [0134.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0134.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0134.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.562] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.563] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1 [0134.563] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1 [0134.563] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1 [0134.564] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1 [0134.564] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1 [0134.564] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1 [0134.564] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.564] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0134.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.567] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1 [0134.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1 [0134.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1 [0134.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1 [0134.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1 [0134.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1 [0134.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 0 [0134.570] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x93 [0134.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.573] WriteFile (in: hFile=0x344, lpBuffer=0x270b580*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x270b580*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0134.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0134.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1 [0134.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1 [0134.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1 [0134.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1 [0134.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.617] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0134.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0134.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1 [0134.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1 [0134.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1 [0134.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1 [0134.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 0 [0134.620] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0134.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.624] WriteFile (in: hFile=0x344, lpBuffer=0x2712dd0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2712dd0*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0134.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0134.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.626] WriteFile (in: hFile=0x344, lpBuffer=0x27160f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27160f8*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0134.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0134.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0134.629] WriteFile (in: hFile=0x344, lpBuffer=0x27193e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x27193e0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0134.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0134.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0134.632] WriteFile (in: hFile=0x344, lpBuffer=0x271c698*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x271c698*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0134.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0134.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.634] WriteFile (in: hFile=0x344, lpBuffer=0x271f940*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x271f940*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0134.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0134.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.636] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.636] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.637] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0134.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0134.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.637] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.638] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.638] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x44 [0134.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0134.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0134.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0134.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0134.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0134.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0134.641] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0134.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0134.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0134.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0134.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0134.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.642] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0134.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0134.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0134.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0134.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0134.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0134.643] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0134.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0134.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0134.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0134.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.644] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0134.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0134.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0134.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0134.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0134.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0134.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0134.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0134.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0134.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0134.649] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0134.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0134.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0134.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0134.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0134.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0134.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.653] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0134.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0134.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0134.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0134.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.655] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.656] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0134.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0134.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.657] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0134.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0134.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0134.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0134.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.659] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.660] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0134.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0134.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0134.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0134.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0134.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0134.661] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0134.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0134.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.662] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0134.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0134.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.662] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.662] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0134.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5a [0134.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0134.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0134.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0134.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0134.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0134.677] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0134.678] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0134.678] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0134.678] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0134.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.679] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0134.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0134.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0134.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0134.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0134.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0134.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0134.684] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0134.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0134.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0134.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0134.687] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0x2b2e9 [0134.688] ReadFile (in: hFile=0x344, lpBuffer=0x126d21a0, nNumberOfBytesToRead=0x2b2e9, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesRead=0x12dab8*=0x2b2e9, lpOverlapped=0x0) returned 1 [0134.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0134.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0134.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.739] GetFileType (hFile=0x344) returned 0x1 [0134.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0134.739] GetFileType (hFile=0x344) returned 0x1 [0134.739] WriteFile (in: hFile=0x344, lpBuffer=0x27a1f90*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x27a1f90*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0134.740] CloseHandle (hObject=0x344) returned 1 [0134.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0134.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.741] GetFileType (hFile=0x344) returned 0x1 [0134.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0134.741] GetFileType (hFile=0x344) returned 0x1 [0134.741] WriteFile (in: hFile=0x344, lpBuffer=0x127aa0f0*, nNumberOfBytesToWrite=0x2b2f0, lpNumberOfBytesWritten=0x12db18, lpOverlapped=0x0 | out: lpBuffer=0x127aa0f0*, lpNumberOfBytesWritten=0x12db18*=0x2b2f0, lpOverlapped=0x0) returned 1 [0134.746] CloseHandle (hObject=0x344) returned 1 [0134.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x5e [0134.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.SYMMYWARE", lpFilePart=0x0) returned 0x68 [0134.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef2a470, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x2b2f0)) returned 1 [0134.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0134.749] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.symmyware")) returned 1 [0134.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0134.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0134.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0134.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0134.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0134.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0134.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.753] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0134.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0134.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0134.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0134.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0134.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0134.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0134.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0134.756] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0134.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.758] GetFileType (hFile=0x344) returned 0x1 [0134.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.758] GetFileType (hFile=0x344) returned 0x1 [0134.759] WriteFile (in: hFile=0x344, lpBuffer=0x27a8fb8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x27a8fb8*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.760] CloseHandle (hObject=0x344) returned 1 [0134.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0134.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0134.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.764] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0134.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0134.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.769] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0134.769] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x76 [0134.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.771] GetFileType (hFile=0x344) returned 0x1 [0134.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.771] GetFileType (hFile=0x344) returned 0x1 [0134.772] WriteFile (in: hFile=0x344, lpBuffer=0x27b0578*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x27b0578*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0134.773] CloseHandle (hObject=0x344) returned 1 [0134.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0134.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0134.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.776] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0134.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0134.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0134.780] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0134.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.782] GetFileType (hFile=0x344) returned 0x1 [0134.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.782] GetFileType (hFile=0x344) returned 0x1 [0134.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0134.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0134.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.789] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0134.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0134.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0134.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0134.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0134.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0134.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0134.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0134.793] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0134.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0134.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.795] GetFileType (hFile=0x344) returned 0x1 [0134.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0134.796] GetFileType (hFile=0x344) returned 0x1 [0134.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0134.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0134.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0134.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0134.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0134.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0 [0134.802] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0134.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0134.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0134.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1 [0134.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0134.805] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0134.805] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0134.805] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0134.805] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.805] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0134.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0134.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0134.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0134.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0134.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.809] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.809] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0134.809] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0134.809] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0134.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0134.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0134.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0134.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0134.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0134.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.811] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0134.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0134.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0134.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0134.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.815] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.815] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0134.815] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0134.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0134.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0134.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0134.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0134.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0134.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0134.817] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0134.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0134.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0134.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0134.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0134.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0134.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0134.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0134.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0134.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0134.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0134.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0134.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0134.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.820] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0134.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0134.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0134.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0134.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0134.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.823] GetFileType (hFile=0x344) returned 0x1 [0134.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0134.824] GetFileType (hFile=0x344) returned 0x1 [0134.824] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xd2c [0134.824] ReadFile (in: hFile=0x344, lpBuffer=0x27ce8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x27ce8d0*, lpNumberOfBytesRead=0x12d938*=0xd2c, lpOverlapped=0x0) returned 1 [0134.825] CloseHandle (hObject=0x344) returned 1 [0134.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0134.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0134.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.874] GetFileType (hFile=0x344) returned 0x1 [0134.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0134.874] GetFileType (hFile=0x344) returned 0x1 [0134.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0134.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0134.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.877] GetFileType (hFile=0x344) returned 0x1 [0134.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0134.877] GetFileType (hFile=0x344) returned 0x1 [0134.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0134.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.SYMMYWARE", lpFilePart=0x0) returned 0x94 [0134.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0134.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff05de50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0134.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.symmyware")) returned 1 [0134.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0134.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0134.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.880] GetFileType (hFile=0x344) returned 0x1 [0134.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0134.880] GetFileType (hFile=0x344) returned 0x1 [0134.880] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xa0 [0134.880] ReadFile (in: hFile=0x344, lpBuffer=0x2826908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2826908*, lpNumberOfBytesRead=0x12d938*=0xa0, lpOverlapped=0x0) returned 1 [0134.882] CloseHandle (hObject=0x344) returned 1 [0134.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0134.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0134.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0134.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0134.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0134.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0134.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0134.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0134.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.SYMMYWARE", lpFilePart=0x0) returned 0x93 [0134.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0134.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0c9510, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0134.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0134.923] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.symmyware")) returned 1 [0134.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0134.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0134.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0134.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0134.927] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5c [0134.927] ReadFile (in: hFile=0x344, lpBuffer=0x287a968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x287a968*, lpNumberOfBytesRead=0x12d938*=0x5c, lpOverlapped=0x0) returned 1 [0135.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0135.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.001] GetFileType (hFile=0x344) returned 0x1 [0135.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0135.002] GetFileType (hFile=0x344) returned 0x1 [0135.002] WriteFile (in: hFile=0x344, lpBuffer=0x26cf778*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26cf778*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0135.003] CloseHandle (hObject=0x344) returned 1 [0135.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.008] GetFileType (hFile=0x344) returned 0x1 [0135.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.009] GetFileType (hFile=0x344) returned 0x1 [0135.009] WriteFile (in: hFile=0x344, lpBuffer=0x26d0970*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x26d0970*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0135.010] CloseHandle (hObject=0x344) returned 1 [0135.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.SYMMYWARE", lpFilePart=0x0) returned 0x91 [0135.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff19db80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0135.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0135.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.symmyware")) returned 1 [0135.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.013] GetFileType (hFile=0x344) returned 0x1 [0135.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.014] GetFileType (hFile=0x344) returned 0x1 [0135.014] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5f [0135.014] ReadFile (in: hFile=0x344, lpBuffer=0x26d1fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x26d1fa0*, lpNumberOfBytesRead=0x12d938*=0x5f, lpOverlapped=0x0) returned 1 [0135.015] CloseHandle (hObject=0x344) returned 1 [0135.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0135.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.024] GetFileType (hFile=0x344) returned 0x1 [0135.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0135.024] GetFileType (hFile=0x344) returned 0x1 [0135.024] WriteFile (in: hFile=0x344, lpBuffer=0x27238e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x27238e8*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0135.025] CloseHandle (hObject=0x344) returned 1 [0135.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.026] GetFileType (hFile=0x344) returned 0x1 [0135.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.026] GetFileType (hFile=0x344) returned 0x1 [0135.026] WriteFile (in: hFile=0x344, lpBuffer=0x2724ad8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x2724ad8*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0135.027] CloseHandle (hObject=0x344) returned 1 [0135.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0135.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1c7390, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0135.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0135.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.symmyware")) returned 1 [0135.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0135.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0135.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0135.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0135.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0135.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0135.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0135.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0135.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0135.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0135.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0135.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0135.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0135.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0135.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0135.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0135.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0135.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0135.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0135.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0135.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0135.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0135.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0135.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0135.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0135.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0135.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0135.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0135.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0135.043] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0135.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0135.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0135.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0135.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0135.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0135.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0135.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0135.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0135.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0135.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0135.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0135.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0135.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0135.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0135.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0135.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0135.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0135.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0135.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0135.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0135.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0135.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.053] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0135.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0135.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0135.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0135.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.056] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0135.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0135.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.058] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.059] GetFileType (hFile=0x344) returned 0x1 [0135.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.059] GetFileType (hFile=0x344) returned 0x1 [0135.060] WriteFile (in: hFile=0x344, lpBuffer=0x273d980*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x273d980*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0135.061] CloseHandle (hObject=0x344) returned 1 [0135.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0135.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0135.061] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.062] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0135.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0135.063] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.065] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.066] GetFileType (hFile=0x344) returned 0x1 [0135.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.066] GetFileType (hFile=0x344) returned 0x1 [0135.066] WriteFile (in: hFile=0x344, lpBuffer=0x2744360*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2744360*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0135.068] CloseHandle (hObject=0x344) returned 1 [0135.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0135.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0135.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.070] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.071] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0135.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0135.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.073] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.074] GetFileType (hFile=0x344) returned 0x1 [0135.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.075] GetFileType (hFile=0x344) returned 0x1 [0135.076] WriteFile (in: hFile=0x344, lpBuffer=0x274ad40*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x274ad40*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0135.077] CloseHandle (hObject=0x344) returned 1 [0135.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0135.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0135.078] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.078] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.079] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.079] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.079] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0135.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0135.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.082] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.083] GetFileType (hFile=0x344) returned 0x1 [0135.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.083] GetFileType (hFile=0x344) returned 0x1 [0135.084] WriteFile (in: hFile=0x344, lpBuffer=0x2751720*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2751720*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0135.085] CloseHandle (hObject=0x344) returned 1 [0135.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0135.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0135.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0135.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0135.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.089] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0135.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0135.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.092] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0135.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0135.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.093] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0135.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0135.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.097] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0135.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0135.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.098] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.098] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.098] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.098] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0135.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0135.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.100] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0135.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0135.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.101] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0135.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0135.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.104] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0135.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0135.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.105] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0135.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0135.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.109] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0135.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0135.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.110] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0135.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0135.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.113] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0135.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0135.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.114] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0135.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0135.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0135.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.120] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0135.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0135.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.121] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0135.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0135.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0135.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0135.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.125] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0135.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0135.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.128] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0135.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0135.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.129] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0135.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0135.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0135.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.131] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.131] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.131] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.131] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0135.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0135.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.132] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0135.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0135.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.135] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.135] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.135] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.135] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0135.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0135.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.136] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0135.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0135.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.139] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0135.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0135.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.140] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.140] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.140] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.140] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0135.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0135.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.144] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0135.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0135.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.145] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.145] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0135.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0135.147] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.148] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0135.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0135.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.149] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0135.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0135.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.152] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.152] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.152] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.152] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0135.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0135.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.152] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.153] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.153] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.153] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0135.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0135.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.155] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.155] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.155] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.156] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0135.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0135.156] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.156] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.157] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.157] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.157] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0135.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0135.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.161] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0135.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0135.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.162] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0135.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0135.164] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.165] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0135.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0135.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.166] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0135.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0135.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.169] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0135.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0135.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.170] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0135.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0135.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.172] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.172] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.172] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.172] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0135.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0135.173] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.173] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.173] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.173] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.173] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0135.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0135.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.177] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0135.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0135.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.178] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0135.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0135.180] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.181] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0135.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0135.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.181] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0135.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0135.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.184] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0135.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0135.185] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.185] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0135.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0135.187] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.187] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0135.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0135.188] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.188] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0135.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0135.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.191] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0135.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0135.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.191] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0135.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0135.193] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.193] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0135.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0135.193] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.194] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0135.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0135.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.196] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0135.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0135.197] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.197] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0135.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0135.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0135.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0135.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0135.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0135.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.202] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0135.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0135.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.202] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0135.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0135.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0135.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0135.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.205] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0135.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0135.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.207] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0135.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0135.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.208] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0135.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0135.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0135.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0135.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0135.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0135.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.213] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0135.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0135.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.213] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0135.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0135.215] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.215] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0135.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0135.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.216] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0135.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0135.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.219] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0135.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0135.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.220] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0135.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0135.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.222] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0135.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0135.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.223] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0135.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0135.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.225] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0135.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0135.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.226] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x94 [0135.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0135.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0135.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.231] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0135.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0135.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.231] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x95 [0135.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x8b [0135.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0135.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x77 [0135.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x78 [0135.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.239] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x77 [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x78 [0135.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.239] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x7d [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0135.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x7d [0135.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0135.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.245] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0135.249] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xc8d [0135.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0135.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0135.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0135.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.SYMMYWARE", lpFilePart=0x0) returned 0x94 [0135.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff46b7e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0135.314] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.symmyware")) returned 1 [0135.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0135.321] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x8f [0135.321] ReadFile (in: hFile=0x344, lpBuffer=0x28c0548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x28c0548*, lpNumberOfBytesRead=0x12d938*=0x8f, lpOverlapped=0x0) returned 1 [0135.322] CloseHandle (hObject=0x344) returned 1 [0135.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0135.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0135.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.484] GetFileType (hFile=0x344) returned 0x1 [0135.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0135.484] GetFileType (hFile=0x344) returned 0x1 [0135.484] WriteFile (in: hFile=0x344, lpBuffer=0x2713588*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2713588*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0135.486] CloseHandle (hObject=0x344) returned 1 [0135.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0135.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.493] GetFileType (hFile=0x344) returned 0x1 [0135.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.494] GetFileType (hFile=0x344) returned 0x1 [0135.494] WriteFile (in: hFile=0x344, lpBuffer=0x2714788*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x2714788*, lpNumberOfBytesWritten=0x12d848*=0x90, lpOverlapped=0x0) returned 1 [0135.495] CloseHandle (hObject=0x344) returned 1 [0135.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0135.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.SYMMYWARE", lpFilePart=0x0) returned 0x93 [0135.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff622f20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0135.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0135.497] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.symmyware")) returned 1 [0135.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.499] GetFileType (hFile=0x344) returned 0x1 [0135.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.499] GetFileType (hFile=0x344) returned 0x1 [0135.499] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5c [0135.500] ReadFile (in: hFile=0x344, lpBuffer=0x2715dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2715dd0*, lpNumberOfBytesRead=0x12d938*=0x5c, lpOverlapped=0x0) returned 1 [0135.536] CloseHandle (hObject=0x344) returned 1 [0135.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0135.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.549] GetFileType (hFile=0x344) returned 0x1 [0135.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0135.549] GetFileType (hFile=0x344) returned 0x1 [0135.549] WriteFile (in: hFile=0x344, lpBuffer=0x2767720*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2767720*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0135.551] CloseHandle (hObject=0x344) returned 1 [0135.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.553] GetFileType (hFile=0x344) returned 0x1 [0135.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.553] GetFileType (hFile=0x344) returned 0x1 [0135.553] WriteFile (in: hFile=0x344, lpBuffer=0x2768918*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x2768918*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0135.555] CloseHandle (hObject=0x344) returned 1 [0135.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0135.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.SYMMYWARE", lpFilePart=0x0) returned 0x91 [0135.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff6ae1b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0135.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0135.555] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.symmyware")) returned 1 [0135.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.556] GetFileType (hFile=0x344) returned 0x1 [0135.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.557] GetFileType (hFile=0x344) returned 0x1 [0135.557] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5b [0135.557] ReadFile (in: hFile=0x344, lpBuffer=0x2769f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2769f48*, lpNumberOfBytesRead=0x12d938*=0x5b, lpOverlapped=0x0) returned 1 [0135.558] CloseHandle (hObject=0x344) returned 1 [0135.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0135.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.566] GetFileType (hFile=0x344) returned 0x1 [0135.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0135.566] GetFileType (hFile=0x344) returned 0x1 [0135.566] WriteFile (in: hFile=0x344, lpBuffer=0x27bb6a8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x27bb6a8*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0135.567] CloseHandle (hObject=0x344) returned 1 [0135.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0135.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0135.601] GetFileType (hFile=0x344) returned 0x1 [0135.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0135.602] GetFileType (hFile=0x344) returned 0x1 [0135.602] WriteFile (in: hFile=0x344, lpBuffer=0x27bc898*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x27bc898*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0135.603] CloseHandle (hObject=0x344) returned 1 [0135.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x85 [0135.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0135.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff7234b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0135.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0135.604] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.symmyware")) returned 1 [0135.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0135.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0135.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0135.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0135.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0135.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0135.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0135.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0135.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0135.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0135.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0135.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0135.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0135.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0135.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0135.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0135.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0135.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0135.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0135.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0135.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0135.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0135.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0135.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0135.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0135.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0135.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0135.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0135.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0135.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0135.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0135.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0135.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0135.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0135.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0135.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0135.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0135.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0135.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0135.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0135.719] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0135.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0135.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0135.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0135.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0135.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.722] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.722] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0135.722] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0135.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0135.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0135.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0135.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0135.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0135.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0135.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0135.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0135.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0135.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0135.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0135.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0135.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0135.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0135.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0135.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0135.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0135.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0135.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0135.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0135.729] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0135.729] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0135.729] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0135.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0135.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0135.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0135.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0135.730] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0135.731] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0135.731] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0135.731] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.731] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0135.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0135.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0135.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0135.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.734] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0135.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0135.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.736] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.737] GetFileType (hFile=0x344) returned 0x1 [0135.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.737] GetFileType (hFile=0x344) returned 0x1 [0135.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0135.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0135.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.739] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0135.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0135.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.740] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.740] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.741] GetFileType (hFile=0x344) returned 0x1 [0135.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.741] GetFileType (hFile=0x344) returned 0x1 [0135.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0135.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0135.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.745] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0135.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0135.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.746] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.747] GetFileType (hFile=0x344) returned 0x1 [0135.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.747] GetFileType (hFile=0x344) returned 0x1 [0135.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0135.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0135.749] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.749] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.750] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0135.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0135.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.752] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0135.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0135.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.756] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0135.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0135.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.757] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.757] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.757] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.757] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0135.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0135.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.760] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.760] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.760] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.760] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0135.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0135.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.762] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0135.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0135.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.769] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.769] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.769] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.769] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0135.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0135.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.771] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0135.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0135.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.774] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0135.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0135.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.775] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0135.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0135.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.780] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0135.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0135.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.781] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0135.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0135.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.785] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.785] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.785] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0135.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0135.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.786] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0135.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0135.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.789] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0135.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0135.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.790] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0135.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0135.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0135.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.794] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0135.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0135.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.795] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0135.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0135.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.798] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0135.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0135.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.799] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0135.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0135.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.803] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0135.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0135.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.804] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0135.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0135.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0135.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.807] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0135.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0135.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.808] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0135.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0135.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.812] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0135.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0135.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.813] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.813] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.813] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.813] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0135.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0135.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.817] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0135.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0135.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.818] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.818] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.818] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.818] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0135.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0135.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.821] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.822] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0135.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0135.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.823] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.823] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.823] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.823] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0135.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0135.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.826] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.826] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.826] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.826] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0135.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0135.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.827] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.827] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.827] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.827] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0135.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0135.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.835] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0135.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0135.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.836] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0135.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0135.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.839] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.840] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0135.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0135.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.841] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0135.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0135.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.846] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0135.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0135.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.848] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0135.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0135.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.851] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.851] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.851] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.851] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0135.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0135.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.852] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.852] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.852] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.852] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0135.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0135.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.856] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.856] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.856] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.856] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0135.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0135.857] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.857] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.857] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.857] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.857] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0135.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0135.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.861] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0135.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0135.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.862] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.862] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.862] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.862] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0135.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0135.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.866] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0135.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0135.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0135.867] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0135.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0135.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0135.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.871] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0135.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0135.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0135.872] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0135.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0135.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0135.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0135.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.876] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0135.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0135.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0135.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0135.876] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.876] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0135.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0135.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0135.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.879] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0135.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0135.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.880] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0135.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0135.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.917] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0135.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0135.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.918] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0135.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0135.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0135.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.991] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0135.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0135.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0135.993] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0135.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0135.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0135.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0135.996] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.008] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0136.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0136.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.009] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0136.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.011] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0136.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0136.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.012] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0136.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0136.014] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.020] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0136.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0136.020] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.020] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0136.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0136.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.024] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0136.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0136.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.025] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0136.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0136.027] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.035] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0136.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0136.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.036] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0136.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0136.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.038] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0136.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0136.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.039] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0136.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0136.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.046] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0136.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0136.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.048] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.057] WriteFile (in: hFile=0x344, lpBuffer=0x26cf848*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26cf848*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.059] CloseHandle (hObject=0x344) returned 1 [0136.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0136.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0136.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.061] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.061] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.062] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0136.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0136.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.065] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.066] GetFileType (hFile=0x344) returned 0x1 [0136.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.067] GetFileType (hFile=0x344) returned 0x1 [0136.068] WriteFile (in: hFile=0x344, lpBuffer=0x26d6228*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26d6228*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.069] CloseHandle (hObject=0x344) returned 1 [0136.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0136.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0136.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.073] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0136.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0136.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.075] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.075] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.076] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.077] GetFileType (hFile=0x344) returned 0x1 [0136.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.077] GetFileType (hFile=0x344) returned 0x1 [0136.078] WriteFile (in: hFile=0x344, lpBuffer=0x26dcc08*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26dcc08*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.080] CloseHandle (hObject=0x344) returned 1 [0136.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0136.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0136.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.082] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.082] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0136.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0136.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.084] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0136.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.085] GetFileType (hFile=0x344) returned 0x1 [0136.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.085] GetFileType (hFile=0x344) returned 0x1 [0136.086] WriteFile (in: hFile=0x344, lpBuffer=0x26e36c8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26e36c8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.090] CloseHandle (hObject=0x344) returned 1 [0136.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0136.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0136.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.094] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.094] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0136.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0136.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.096] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0136.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.097] GetFileType (hFile=0x344) returned 0x1 [0136.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.097] GetFileType (hFile=0x344) returned 0x1 [0136.098] WriteFile (in: hFile=0x344, lpBuffer=0x26ea188*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26ea188*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.099] CloseHandle (hObject=0x344) returned 1 [0136.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x94 [0136.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0136.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.100] GetFileType (hFile=0x344) returned 0x1 [0136.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0136.100] GetFileType (hFile=0x344) returned 0x1 [0136.101] WriteFile (in: hFile=0x344, lpBuffer=0x26ed590*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x26ed590*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0136.102] CloseHandle (hObject=0x344) returned 1 [0136.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0136.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0136.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0136.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0136.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.104] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0136.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0136.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0136.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0136.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0136.106] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x95 [0136.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0136.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.111] GetFileType (hFile=0x344) returned 0x1 [0136.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0136.112] GetFileType (hFile=0x344) returned 0x1 [0136.112] WriteFile (in: hFile=0x344, lpBuffer=0x26f46d0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x26f46d0*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0136.114] CloseHandle (hObject=0x344) returned 1 [0136.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x8b [0136.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0136.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.115] GetFileType (hFile=0x344) returned 0x1 [0136.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0136.115] GetFileType (hFile=0x344) returned 0x1 [0136.116] WriteFile (in: hFile=0x344, lpBuffer=0x26f7aa8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d8e8, lpOverlapped=0x0 | out: lpBuffer=0x26f7aa8*, lpNumberOfBytesWritten=0x12d8e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.117] CloseHandle (hObject=0x344) returned 1 [0136.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0136.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0136.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.118] GetFileType (hFile=0x344) returned 0x1 [0136.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0136.118] GetFileType (hFile=0x344) returned 0x1 [0136.119] WriteFile (in: hFile=0x344, lpBuffer=0x26fae70*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d968, lpOverlapped=0x0 | out: lpBuffer=0x26fae70*, lpNumberOfBytesWritten=0x12d968*=0x4aa, lpOverlapped=0x0) returned 1 [0136.120] CloseHandle (hObject=0x344) returned 1 [0136.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0136.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0136.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0136.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0136.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 0 [0136.122] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0136.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0136.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0136.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0136.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0136.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0136.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0136.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0136.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0136.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0136.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0136.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0136.130] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0136.130] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0136.130] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0136.131] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0136.131] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0136.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0136.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0136.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0136.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0136.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.135] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0136.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0136.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0136.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0136.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.137] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0136.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0136.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0136.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0136.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0136.142] GetFileType (hFile=0x344) returned 0x1 [0136.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0136.142] GetFileType (hFile=0x344) returned 0x1 [0136.142] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x1a33 [0136.142] ReadFile (in: hFile=0x344, lpBuffer=0x2703678, nNumberOfBytesToRead=0x1a33, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2703678*, lpNumberOfBytesRead=0x12d938*=0x1a33, lpOverlapped=0x0) returned 1 [0136.145] CloseHandle (hObject=0x344) returned 1 [0136.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0136.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0136.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.220] GetFileType (hFile=0x344) returned 0x1 [0136.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0136.221] GetFileType (hFile=0x344) returned 0x1 [0136.221] WriteFile (in: hFile=0x344, lpBuffer=0x275db68*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x275db68*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0136.222] CloseHandle (hObject=0x344) returned 1 [0136.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0136.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0136.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0136.224] GetFileType (hFile=0x344) returned 0x1 [0136.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0136.224] GetFileType (hFile=0x344) returned 0x1 [0136.224] WriteFile (in: hFile=0x344, lpBuffer=0x275aa38*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x275aa38*, lpNumberOfBytesWritten=0x12d998*=0x1a40, lpOverlapped=0x0) returned 1 [0136.226] CloseHandle (hObject=0x344) returned 1 [0136.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0136.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.SYMMYWARE", lpFilePart=0x0) returned 0x90 [0136.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xffcb2a20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1a40)) returned 1 [0136.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0136.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.symmyware")) returned 1 [0136.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0136.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0136.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0136.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0136.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0136.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0136.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0136.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0136.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0136.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0136.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0136.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0136.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0136.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0136.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0136.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0136.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0136.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0136.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0136.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0136.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0136.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0136.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0136.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0136.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0136.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0136.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0136.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0136.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0136.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0136.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0136.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0136.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0136.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0136.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0136.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0136.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0136.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0136.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0136.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0136.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0136.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0136.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0136.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0136.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0136.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0136.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0136.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0136.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0136.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0136.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0136.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0136.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0136.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0136.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0136.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0136.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0136.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0136.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0136.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0136.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0136.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0136.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0136.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0136.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0136.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0136.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0136.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0136.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0136.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0136.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0136.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0136.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0136.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0136.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0136.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0136.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.256] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.259] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.259] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.260] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.261] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.267] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.268] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.272] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.274] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.274] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.281] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.281] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.283] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.292] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.293] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.296] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.297] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.297] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.297] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.297] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.300] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.301] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.304] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.305] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.309] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.309] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.310] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.313] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.313] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.314] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.314] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.317] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.319] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.320] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.323] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.324] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.328] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.329] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.333] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.335] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.340] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.341] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.344] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.346] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.349] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.350] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.354] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.355] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.360] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.363] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.364] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.368] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.371] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.372] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.375] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.375] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.375] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.375] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.376] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.378] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.379] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.383] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.384] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.386] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.386] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.386] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.390] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.390] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.392] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.393] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.396] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.396] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.401] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.402] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.405] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.405] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.408] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.409] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.411] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.411] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.415] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.416] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.418] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.418] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.423] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.423] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.425] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.426] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.429] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.430] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.435] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.436] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.438] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.439] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.441] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.441] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.444] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.445] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.452] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.453] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.458] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.458] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.497] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.504] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.509] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xd4e [0136.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x87 [0136.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0136.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.577] GetFileType (hFile=0x344) returned 0x1 [0136.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0136.577] GetFileType (hFile=0x344) returned 0x1 [0136.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x87 [0136.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0136.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0136.579] GetFileType (hFile=0x344) returned 0x1 [0136.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0136.580] GetFileType (hFile=0x344) returned 0x1 [0136.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x87 [0136.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.SYMMYWARE", lpFilePart=0x0) returned 0x91 [0136.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfffdf9f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0136.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0136.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.symmyware")) returned 1 [0136.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x88 [0136.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x89 [0136.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0136.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0136.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0136.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0136.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0136.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0136.587] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0136.587] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0136.587] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0136.587] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0136.587] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0136.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0136.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0136.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0136.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0136.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0136.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0136.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0136.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0136.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0136.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0136.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0136.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0136.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0136.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0136.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0136.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0136.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0136.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0136.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0136.593] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0136.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x88 [0136.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x89 [0136.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.596] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.596] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0136.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0136.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0136.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0136.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0136.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0136.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0136.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0136.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0136.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0136.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0136.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0136.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0136.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0136.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0136.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0136.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0136.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0136.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0136.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0136.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0136.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0136.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0136.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0136.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0136.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0136.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0136.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0136.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0136.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0136.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0136.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0136.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0136.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0136.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0136.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0136.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0136.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0136.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0136.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.609] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0136.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0136.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x8b [0136.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8c [0136.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.613] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.614] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x8b [0136.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8c [0136.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.633] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.635] GetFileType (hFile=0x344) returned 0x1 [0136.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.635] GetFileType (hFile=0x344) returned 0x1 [0136.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x8b [0136.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8c [0136.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.639] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.639] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.640] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x8b [0136.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8c [0136.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.642] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.643] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.644] GetFileType (hFile=0x344) returned 0x1 [0136.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.644] GetFileType (hFile=0x344) returned 0x1 [0136.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x8b [0136.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8c [0136.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.648] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.648] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x8b [0136.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8c [0136.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.651] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.652] GetFileType (hFile=0x344) returned 0x1 [0136.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.652] GetFileType (hFile=0x344) returned 0x1 [0136.655] WriteFile (in: hFile=0x344, lpBuffer=0x272e868*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x272e868*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.656] CloseHandle (hObject=0x344) returned 1 [0136.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x8b [0136.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8c [0136.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.670] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x8b [0136.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8c [0136.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.671] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.672] GetFileType (hFile=0x344) returned 0x1 [0136.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.672] GetFileType (hFile=0x344) returned 0x1 [0136.673] WriteFile (in: hFile=0x344, lpBuffer=0x2735308*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2735308*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.678] CloseHandle (hObject=0x344) returned 1 [0136.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x8b [0136.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8c [0136.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.680] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x8b [0136.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8c [0136.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.682] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.683] GetFileType (hFile=0x344) returned 0x1 [0136.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.683] GetFileType (hFile=0x344) returned 0x1 [0136.684] WriteFile (in: hFile=0x344, lpBuffer=0x273bda8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x273bda8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.685] CloseHandle (hObject=0x344) returned 1 [0136.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x8b [0136.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8c [0136.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.689] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.690] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.690] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.691] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x8b [0136.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8c [0136.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.693] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.693] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.694] GetFileType (hFile=0x344) returned 0x1 [0136.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.695] GetFileType (hFile=0x344) returned 0x1 [0136.695] WriteFile (in: hFile=0x344, lpBuffer=0x2742848*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2742848*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.697] CloseHandle (hObject=0x344) returned 1 [0136.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x8b [0136.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8c [0136.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.698] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.699] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.699] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.699] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x8b [0136.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8c [0136.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.700] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.707] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.710] WriteFile (in: hFile=0x344, lpBuffer=0x27492e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x27492e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x8b [0136.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8c [0136.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.719] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x8b [0136.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8c [0136.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.720] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.720] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.720] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.720] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.722] WriteFile (in: hFile=0x344, lpBuffer=0x274fd88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x274fd88*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x8b [0136.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8c [0136.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.724] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.725] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x8b [0136.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8c [0136.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.726] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.728] WriteFile (in: hFile=0x344, lpBuffer=0x2756828*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2756828*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x8b [0136.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8c [0136.730] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.734] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x8b [0136.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8c [0136.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.736] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.738] WriteFile (in: hFile=0x344, lpBuffer=0x275d2c8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x275d2c8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x8c [0136.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8d [0136.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.741] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x8c [0136.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8d [0136.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.742] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.743] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0136.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.746] WriteFile (in: hFile=0x344, lpBuffer=0x2763d88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2763d88*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x8b [0136.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8c [0136.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.749] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.750] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x8b [0136.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8c [0136.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.752] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.754] WriteFile (in: hFile=0x344, lpBuffer=0x276a828*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x276a828*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x8b [0136.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8c [0136.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.757] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x8b [0136.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8c [0136.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.758] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.761] WriteFile (in: hFile=0x344, lpBuffer=0x27712c8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x27712c8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x8b [0136.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8c [0136.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.765] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x8b [0136.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8c [0136.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.766] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.767] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.770] WriteFile (in: hFile=0x344, lpBuffer=0x2777d68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2777d68*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x8b [0136.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8c [0136.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.773] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x8b [0136.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8c [0136.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.776] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.778] WriteFile (in: hFile=0x344, lpBuffer=0x277e808*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x277e808*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0136.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x8b [0136.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8c [0136.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.781] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.782] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x8b [0136.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8c [0136.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.783] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.783] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.784] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x8b [0136.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8c [0136.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.788] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x8b [0136.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8c [0136.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.789] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x8b [0136.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8c [0136.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.794] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x8b [0136.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8c [0136.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.795] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x8b [0136.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8c [0136.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.797] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.798] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x8b [0136.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8c [0136.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.799] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x8b [0136.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8c [0136.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.811] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.811] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x8b [0136.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8c [0136.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.812] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x8b [0136.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8c [0136.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.815] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.816] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.816] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x8b [0136.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8c [0136.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.817] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.817] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x8b [0136.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8c [0136.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.823] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x8b [0136.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8c [0136.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.824] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.824] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.824] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.824] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x8b [0136.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8c [0136.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.828] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.828] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.828] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.828] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x8b [0136.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8c [0136.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.830] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.830] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.830] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.830] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x8b [0136.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8c [0136.833] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.837] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x8b [0136.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8c [0136.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.838] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x8b [0136.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8c [0136.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.842] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x8b [0136.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8c [0136.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.843] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8e [0136.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8f [0136.847] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.848] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8e [0136.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8f [0136.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.850] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.850] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9c [0136.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8e [0136.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8f [0136.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.854] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8e [0136.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8f [0136.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.855] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.855] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.856] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0136.856] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9c [0136.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0136.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x8b [0136.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8c [0136.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.860] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.860] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.860] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.860] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x8b [0136.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8c [0136.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0136.861] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x8b [0136.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8c [0136.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.864] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x8b [0136.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8c [0136.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.865] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0136.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0136.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x8b [0136.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8c [0136.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.870] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0136.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0136.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x8b [0136.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8c [0136.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.871] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0136.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x8b [0136.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8c [0136.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.873] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x8b [0136.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8c [0136.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.874] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x8b [0136.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8c [0136.876] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.878] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x8b [0136.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8c [0136.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.878] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x8b [0136.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8c [0136.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.881] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x8b [0136.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8c [0136.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.882] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x8b [0136.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8c [0136.884] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.885] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x8b [0136.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8c [0136.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.886] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x8b [0136.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8c [0136.888] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.889] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x8b [0136.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8c [0136.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.889] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpFilePart=0x0) returned 0x8b [0136.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8c [0136.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.893] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpFilePart=0x0) returned 0x8b [0136.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8c [0136.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.894] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpFilePart=0x0) returned 0x8b [0136.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8c [0136.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.896] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpFilePart=0x0) returned 0x8b [0136.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8c [0136.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.897] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0136.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8e [0136.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8f [0136.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.900] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8e [0136.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8f [0136.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.901] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9c [0136.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8e [0136.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8f [0136.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.903] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8e [0136.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8f [0136.904] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.904] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9c [0136.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x96 [0136.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpFilePart=0x0) returned 0x89 [0136.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", lpFilePart=0x0) returned 0x8a [0136.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.914] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpFilePart=0x0) returned 0x89 [0136.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", lpFilePart=0x0) returned 0x8a [0136.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.915] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0136.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x8d [0136.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0136.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpFilePart=0x0) returned 0x77 [0136.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpFilePart=0x0) returned 0x78 [0136.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.921] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpFilePart=0x0) returned 0x77 [0136.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpFilePart=0x0) returned 0x78 [0136.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.922] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpFilePart=0x0) returned 0x7d [0136.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpFilePart=0x0) returned 0x7e [0136.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.926] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpFilePart=0x0) returned 0x7d [0136.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpFilePart=0x0) returned 0x7e [0136.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0136.929] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0136.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0136.946] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xd47 [0136.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0136.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0137.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0137.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.SYMMYWARE", lpFilePart=0x0) returned 0x94 [0137.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3ab4d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0137.002] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.symmyware")) returned 1 [0137.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0137.007] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x9d [0137.007] ReadFile (in: hFile=0x344, lpBuffer=0x2891a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2891a48*, lpNumberOfBytesRead=0x12d938*=0x9d, lpOverlapped=0x0) returned 1 [0137.010] CloseHandle (hObject=0x344) returned 1 [0137.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0137.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.118] GetFileType (hFile=0x344) returned 0x1 [0137.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.118] GetFileType (hFile=0x344) returned 0x1 [0137.118] WriteFile (in: hFile=0x344, lpBuffer=0x26e6418*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26e6418*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.119] CloseHandle (hObject=0x344) returned 1 [0137.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0137.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.121] GetFileType (hFile=0x344) returned 0x1 [0137.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.121] GetFileType (hFile=0x344) returned 0x1 [0137.121] WriteFile (in: hFile=0x344, lpBuffer=0x26e7618*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x26e7618*, lpNumberOfBytesWritten=0x12d848*=0xa0, lpOverlapped=0x0) returned 1 [0137.123] CloseHandle (hObject=0x344) returned 1 [0137.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0137.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.SYMMYWARE", lpFilePart=0x0) returned 0x93 [0137.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4d0450, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0137.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.124] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.symmyware")) returned 1 [0137.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0137.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.126] GetFileType (hFile=0x344) returned 0x1 [0137.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.126] GetFileType (hFile=0x344) returned 0x1 [0137.126] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5c [0137.126] ReadFile (in: hFile=0x344, lpBuffer=0x26e8c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x26e8c60*, lpNumberOfBytesRead=0x12d938*=0x5c, lpOverlapped=0x0) returned 1 [0137.127] CloseHandle (hObject=0x344) returned 1 [0137.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0137.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.152] GetFileType (hFile=0x344) returned 0x1 [0137.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.152] GetFileType (hFile=0x344) returned 0x1 [0137.153] WriteFile (in: hFile=0x344, lpBuffer=0x273a5b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x273a5b0*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.154] CloseHandle (hObject=0x344) returned 1 [0137.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0137.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.155] GetFileType (hFile=0x344) returned 0x1 [0137.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.156] GetFileType (hFile=0x344) returned 0x1 [0137.156] WriteFile (in: hFile=0x344, lpBuffer=0x273b7a8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x273b7a8*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0137.157] CloseHandle (hObject=0x344) returned 1 [0137.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x87 [0137.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.SYMMYWARE", lpFilePart=0x0) returned 0x91 [0137.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x523470, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0137.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.symmyware")) returned 1 [0137.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0137.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.159] GetFileType (hFile=0x344) returned 0x1 [0137.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.159] GetFileType (hFile=0x344) returned 0x1 [0137.159] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5f [0137.159] ReadFile (in: hFile=0x344, lpBuffer=0x273cdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x273cdd8*, lpNumberOfBytesRead=0x12d938*=0x5f, lpOverlapped=0x0) returned 1 [0137.161] CloseHandle (hObject=0x344) returned 1 [0137.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0137.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.173] GetFileType (hFile=0x344) returned 0x1 [0137.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.173] GetFileType (hFile=0x344) returned 0x1 [0137.173] WriteFile (in: hFile=0x344, lpBuffer=0x278e538*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x278e538*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.176] CloseHandle (hObject=0x344) returned 1 [0137.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0137.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.177] GetFileType (hFile=0x344) returned 0x1 [0137.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.178] GetFileType (hFile=0x344) returned 0x1 [0137.178] WriteFile (in: hFile=0x344, lpBuffer=0x278f728*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x278f728*, lpNumberOfBytesWritten=0x12d848*=0x60, lpOverlapped=0x0) returned 1 [0137.179] CloseHandle (hObject=0x344) returned 1 [0137.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x85 [0137.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0137.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x558fd0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0137.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.181] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.symmyware")) returned 1 [0137.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0137.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0137.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.187] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.188] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0137.188] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0137.188] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0137.189] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0137.189] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0137.189] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0137.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0137.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0137.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0137.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0137.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0137.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0137.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0137.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0137.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0137.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0137.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0137.192] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0137.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0137.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0137.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0137.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0137.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0137.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0137.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0137.195] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0137.195] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0137.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0137.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0137.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0137.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0137.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0137.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0137.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0137.197] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0137.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0137.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0137.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0137.198] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0137.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0137.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0137.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0137.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0137.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0137.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0137.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0137.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0137.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0137.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0137.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0137.204] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0137.205] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0137.205] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0137.205] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0137.206] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0137.206] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0137.207] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0137.207] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0137.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0137.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0137.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0137.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0137.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0137.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0137.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0137.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0137.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0137.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0137.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0137.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0137.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0137.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0137.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0137.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0137.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0137.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0137.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0137.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0137.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0137.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0137.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0137.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0137.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0137.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0137.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0137.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0137.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0137.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0137.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0137.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.216] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0137.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0137.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0137.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0137.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.219] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0137.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0137.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.221] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.222] GetFileType (hFile=0x344) returned 0x1 [0137.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.223] GetFileType (hFile=0x344) returned 0x1 [0137.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0137.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0137.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.226] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0137.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0137.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.228] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.228] GetFileType (hFile=0x344) returned 0x1 [0137.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.229] GetFileType (hFile=0x344) returned 0x1 [0137.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0137.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0137.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.231] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0137.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0137.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.232] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.233] GetFileType (hFile=0x344) returned 0x1 [0137.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.233] GetFileType (hFile=0x344) returned 0x1 [0137.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0137.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0137.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.237] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0137.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0137.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.238] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0137.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0137.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.241] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0137.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0137.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.242] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0137.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0137.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.247] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0137.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0137.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.248] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0137.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0137.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.251] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0137.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0137.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.252] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0137.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0137.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.256] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0137.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0137.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.257] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0137.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0137.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.261] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0137.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0137.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.262] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0137.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0137.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.268] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0137.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0137.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.269] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.269] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.269] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0137.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0137.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.272] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0137.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0137.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.273] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0137.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0137.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0137.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.278] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0137.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0137.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.279] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0137.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0137.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0137.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0137.283] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.283] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0137.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0137.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0137.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0137.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.288] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0137.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0137.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0137.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.291] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.291] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.291] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.292] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0137.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0137.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.293] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0137.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0137.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.296] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.296] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0137.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0137.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.297] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.298] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0137.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0137.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.301] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0137.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0137.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.302] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.302] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0137.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0137.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.306] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.306] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.306] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.307] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0137.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0137.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.308] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0137.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0137.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.311] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.311] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.311] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0137.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0137.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.311] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.312] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.312] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.312] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0137.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0137.314] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.316] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0137.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0137.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.317] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0137.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0137.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.320] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0137.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0137.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.322] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0137.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0137.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.326] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0137.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0137.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.327] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.327] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0137.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0137.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.330] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0137.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0137.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.331] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0137.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0137.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.336] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0137.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0137.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.337] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0137.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0137.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.341] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0137.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0137.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.342] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0137.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0137.344] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.346] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0137.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0137.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.347] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0137.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0137.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.350] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0137.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0137.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0137.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0137.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.355] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0137.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0137.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.356] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0137.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0137.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.358] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0137.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0137.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0137.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0137.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.363] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0137.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0137.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.364] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0137.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0137.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.366] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0137.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0137.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.367] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0137.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0137.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0137.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0137.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.370] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0137.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0137.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.373] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0137.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0137.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.373] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0137.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0137.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.376] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0137.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0137.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.377] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0137.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.379] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0137.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0137.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.380] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0137.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0137.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.383] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0137.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0137.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.384] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0137.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0137.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.387] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0137.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0137.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.387] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0137.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0137.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0137.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0137.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0137.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0137.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.394] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0137.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0137.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.395] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0137.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0137.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.399] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0137.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0137.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.400] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0137.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0137.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.402] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0137.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0137.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.402] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0137.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0137.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.407] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0137.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0137.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.408] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x94 [0137.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0137.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0137.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.411] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0137.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0137.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.412] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x95 [0137.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x8b [0137.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0137.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0137.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0137.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.420] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0137.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0137.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.421] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0137.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0137.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.424] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0137.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0137.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.427] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0137.429] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x1378 [0137.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0137.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.494] GetFileType (hFile=0x344) returned 0x1 [0137.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.494] GetFileType (hFile=0x344) returned 0x1 [0137.494] WriteFile (in: hFile=0x344, lpBuffer=0x272d878*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x272d878*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.496] CloseHandle (hObject=0x344) returned 1 [0137.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0137.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.497] GetFileType (hFile=0x344) returned 0x1 [0137.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.497] GetFileType (hFile=0x344) returned 0x1 [0137.497] WriteFile (in: hFile=0x344, lpBuffer=0x272ae08*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x272ae08*, lpNumberOfBytesWritten=0x12d998*=0x1380, lpOverlapped=0x0) returned 1 [0137.498] CloseHandle (hObject=0x344) returned 1 [0137.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0137.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0137.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x855260, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1380)) returned 1 [0137.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.500] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.symmyware")) returned 1 [0137.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0137.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.502] GetFileType (hFile=0x344) returned 0x1 [0137.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.502] GetFileType (hFile=0x344) returned 0x1 [0137.502] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x1103 [0137.502] ReadFile (in: hFile=0x344, lpBuffer=0x272f040, nNumberOfBytesToRead=0x1103, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x272f040*, lpNumberOfBytesRead=0x12d938*=0x1103, lpOverlapped=0x0) returned 1 [0137.504] CloseHandle (hObject=0x344) returned 1 [0137.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0137.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.513] GetFileType (hFile=0x344) returned 0x1 [0137.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.513] GetFileType (hFile=0x344) returned 0x1 [0137.513] WriteFile (in: hFile=0x344, lpBuffer=0x2785e58*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2785e58*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.515] CloseHandle (hObject=0x344) returned 1 [0137.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0137.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.517] GetFileType (hFile=0x344) returned 0x1 [0137.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.517] GetFileType (hFile=0x344) returned 0x1 [0137.517] WriteFile (in: hFile=0x344, lpBuffer=0x2783610*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x2783610*, lpNumberOfBytesWritten=0x12d998*=0x1110, lpOverlapped=0x0) returned 1 [0137.518] CloseHandle (hObject=0x344) returned 1 [0137.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x97 [0137.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.SYMMYWARE", lpFilePart=0x0) returned 0xa1 [0137.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x885fa0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0137.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.520] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.symmyware")) returned 1 [0137.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0137.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.522] GetFileType (hFile=0x344) returned 0x1 [0137.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.522] GetFileType (hFile=0x344) returned 0x1 [0137.522] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x5b6c [0137.522] ReadFile (in: hFile=0x344, lpBuffer=0x27876f0, nNumberOfBytesToRead=0x5b6c, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x27876f0*, lpNumberOfBytesRead=0x12d938*=0x5b6c, lpOverlapped=0x0) returned 1 [0137.527] CloseHandle (hObject=0x344) returned 1 [0137.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0137.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.540] GetFileType (hFile=0x344) returned 0x1 [0137.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.540] GetFileType (hFile=0x344) returned 0x1 [0137.540] WriteFile (in: hFile=0x344, lpBuffer=0x27fa150*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x27fa150*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.542] CloseHandle (hObject=0x344) returned 1 [0137.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0137.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.543] GetFileType (hFile=0x344) returned 0x1 [0137.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.544] GetFileType (hFile=0x344) returned 0x1 [0137.544] WriteFile (in: hFile=0x344, lpBuffer=0x27f2eb8*, nNumberOfBytesToWrite=0x5b70, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x27f2eb8*, lpNumberOfBytesWritten=0x12d998*=0x5b70, lpOverlapped=0x0) returned 1 [0137.546] CloseHandle (hObject=0x344) returned 1 [0137.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x93 [0137.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.SYMMYWARE", lpFilePart=0x0) returned 0x9d [0137.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c5740, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5b70)) returned 1 [0137.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.symmyware")) returned 1 [0137.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0137.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.556] GetFileType (hFile=0x344) returned 0x1 [0137.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.556] GetFileType (hFile=0x344) returned 0x1 [0137.556] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xe0 [0137.556] ReadFile (in: hFile=0x344, lpBuffer=0x27fbab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x27fbab8*, lpNumberOfBytesRead=0x12d938*=0xe0, lpOverlapped=0x0) returned 1 [0137.558] CloseHandle (hObject=0x344) returned 1 [0137.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0137.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0137.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.571] GetFileType (hFile=0x344) returned 0x1 [0137.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0137.571] GetFileType (hFile=0x344) returned 0x1 [0137.571] WriteFile (in: hFile=0x344, lpBuffer=0x284d378*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x284d378*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0137.573] CloseHandle (hObject=0x344) returned 1 [0137.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0137.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0137.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0137.576] GetFileType (hFile=0x344) returned 0x1 [0137.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0137.576] GetFileType (hFile=0x344) returned 0x1 [0137.576] WriteFile (in: hFile=0x344, lpBuffer=0x284e5a0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x284e5a0*, lpNumberOfBytesWritten=0x12d848*=0xf0, lpOverlapped=0x0) returned 1 [0137.577] CloseHandle (hObject=0x344) returned 1 [0137.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x92 [0137.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.SYMMYWARE", lpFilePart=0x0) returned 0x9c [0137.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9027d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0137.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0137.580] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.symmyware")) returned 1 [0137.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0137.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0137.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.586] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0137.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0137.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0137.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0137.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0137.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0137.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0137.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0137.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0137.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0137.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0137.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0137.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0137.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0137.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0137.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0137.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0137.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0137.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0137.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0137.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0137.596] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0137.596] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0137.596] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0137.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0137.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0137.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0137.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0137.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0137.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0137.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0137.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0137.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0137.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0137.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0137.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0137.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0137.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0137.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0137.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0137.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0137.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0137.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0137.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0137.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0137.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0137.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0137.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0137.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0137.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0137.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0137.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0137.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0137.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0137.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0137.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0137.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0137.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0137.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0137.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0137.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0137.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0137.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0137.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0137.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0137.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0137.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0137.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0137.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0137.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0 [0137.611] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0137.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0137.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0137.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0137.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0137.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0137.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0137.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0137.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0137.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0137.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0137.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0137.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0137.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0137.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0137.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0137.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0137.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0137.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0137.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0137.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0137.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0137.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0137.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0137.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0137.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0137.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0137.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0137.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0137.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0137.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0137.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0137.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0137.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0137.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0137.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0137.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0137.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0137.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0137.626] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0137.626] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0137.627] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0137.627] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0137.627] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0137.628] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0137.628] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0137.628] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0137.629] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0137.629] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0137.629] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0137.629] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0137.630] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0137.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0137.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0137.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0137.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0137.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0137.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.653] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0137.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0137.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0137.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0137.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.657] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0137.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0137.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.658] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.658] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.658] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.658] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0137.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0137.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.663] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.663] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.663] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.663] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0137.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0137.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.664] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.664] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.664] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.664] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0137.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0137.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.669] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0137.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0137.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.670] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0137.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0137.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.674] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0137.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0137.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.675] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0137.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0137.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.680] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0137.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0137.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.681] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.681] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0137.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0137.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.684] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0137.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0137.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.686] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0137.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0137.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.691] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.691] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0137.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0137.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.692] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.693] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0137.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0137.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.696] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.696] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.696] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.696] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0137.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0137.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.697] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.697] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.697] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.697] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.699] WriteFile (in: hFile=0x344, lpBuffer=0x289f6c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x289f6c0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0137.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0137.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.702] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.703] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.703] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0137.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0137.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.704] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.705] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.707] WriteFile (in: hFile=0x344, lpBuffer=0x28a60a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28a60a0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0137.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0137.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.710] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0137.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0137.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.712] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.713] WriteFile (in: hFile=0x344, lpBuffer=0x28aca80*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28aca80*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0137.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0137.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.717] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.718] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0137.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0137.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.720] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.720] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.723] WriteFile (in: hFile=0x344, lpBuffer=0x28b3460*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28b3460*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0137.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0137.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.725] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.726] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0137.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0137.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.728] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.728] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.731] WriteFile (in: hFile=0x344, lpBuffer=0x28b9f20*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28b9f20*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0137.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0137.734] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.737] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0137.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0137.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.738] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.738] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.738] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.739] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.741] WriteFile (in: hFile=0x344, lpBuffer=0x28c09e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28c09e0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0137.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0137.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.744] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.744] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.745] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0137.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0137.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.747] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.747] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.749] WriteFile (in: hFile=0x344, lpBuffer=0x28c73c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x28c73c0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0137.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0137.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.753] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0137.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0137.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.755] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0137.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0137.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0137.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.758] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0137.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0137.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.759] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.759] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.759] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.760] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0137.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0137.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.765] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0137.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0137.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0137.777] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.778] GetFileType (hFile=0x344) returned 0x1 [0137.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.778] GetFileType (hFile=0x344) returned 0x1 [0137.779] WriteFile (in: hFile=0x344, lpBuffer=0x26e3f58*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26e3f58*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.780] CloseHandle (hObject=0x344) returned 1 [0137.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0137.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0137.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.782] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0137.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0137.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0137.785] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.786] GetFileType (hFile=0x344) returned 0x1 [0137.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.786] GetFileType (hFile=0x344) returned 0x1 [0137.786] WriteFile (in: hFile=0x344, lpBuffer=0x26ea938*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26ea938*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.788] CloseHandle (hObject=0x344) returned 1 [0137.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0137.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0137.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.792] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0137.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0137.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.794] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.795] GetFileType (hFile=0x344) returned 0x1 [0137.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.796] GetFileType (hFile=0x344) returned 0x1 [0137.797] WriteFile (in: hFile=0x344, lpBuffer=0x26f1318*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26f1318*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.798] CloseHandle (hObject=0x344) returned 1 [0137.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0137.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0137.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.800] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0137.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0137.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.801] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0137.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.802] GetFileType (hFile=0x344) returned 0x1 [0137.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.803] GetFileType (hFile=0x344) returned 0x1 [0137.803] WriteFile (in: hFile=0x344, lpBuffer=0x26f7d98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26f7d98*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.805] CloseHandle (hObject=0x344) returned 1 [0137.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0137.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0137.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.807] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0137.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0137.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.809] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.810] GetFileType (hFile=0x344) returned 0x1 [0137.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.810] GetFileType (hFile=0x344) returned 0x1 [0137.810] WriteFile (in: hFile=0x344, lpBuffer=0x26fe778*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26fe778*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.812] CloseHandle (hObject=0x344) returned 1 [0137.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0137.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0137.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.814] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0137.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0137.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.816] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0137.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.817] GetFileType (hFile=0x344) returned 0x1 [0137.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.817] GetFileType (hFile=0x344) returned 0x1 [0137.818] WriteFile (in: hFile=0x344, lpBuffer=0x2705238*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2705238*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.819] CloseHandle (hObject=0x344) returned 1 [0137.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x89 [0137.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x8a [0137.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.821] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x89 [0137.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x8a [0137.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.823] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.824] GetFileType (hFile=0x344) returned 0x1 [0137.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.824] GetFileType (hFile=0x344) returned 0x1 [0137.825] WriteFile (in: hFile=0x344, lpBuffer=0x270bc18*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x270bc18*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.827] CloseHandle (hObject=0x344) returned 1 [0137.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x89 [0137.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8a [0137.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.829] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x89 [0137.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8a [0137.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.831] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.832] GetFileType (hFile=0x344) returned 0x1 [0137.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.832] GetFileType (hFile=0x344) returned 0x1 [0137.833] WriteFile (in: hFile=0x344, lpBuffer=0x27125f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x27125f8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.834] CloseHandle (hObject=0x344) returned 1 [0137.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0137.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0137.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.837] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0137.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0137.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.839] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.840] GetFileType (hFile=0x344) returned 0x1 [0137.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.840] GetFileType (hFile=0x344) returned 0x1 [0137.841] WriteFile (in: hFile=0x344, lpBuffer=0x2718fd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2718fd8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.842] CloseHandle (hObject=0x344) returned 1 [0137.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0137.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0137.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.846] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0137.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0137.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.848] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.850] GetFileType (hFile=0x344) returned 0x1 [0137.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.850] GetFileType (hFile=0x344) returned 0x1 [0137.851] WriteFile (in: hFile=0x344, lpBuffer=0x271f9b8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x271f9b8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.852] CloseHandle (hObject=0x344) returned 1 [0137.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0137.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0137.853] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.855] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0137.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0137.856] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.857] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.858] GetFileType (hFile=0x344) returned 0x1 [0137.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.858] GetFileType (hFile=0x344) returned 0x1 [0137.859] WriteFile (in: hFile=0x344, lpBuffer=0x2726398*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2726398*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.862] CloseHandle (hObject=0x344) returned 1 [0137.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x89 [0137.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x8a [0137.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.866] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x89 [0137.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x8a [0137.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.869] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.871] GetFileType (hFile=0x344) returned 0x1 [0137.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.871] GetFileType (hFile=0x344) returned 0x1 [0137.872] WriteFile (in: hFile=0x344, lpBuffer=0x272cd78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x272cd78*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.874] CloseHandle (hObject=0x344) returned 1 [0137.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0137.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0137.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.877] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0137.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0137.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.880] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.881] GetFileType (hFile=0x344) returned 0x1 [0137.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.882] GetFileType (hFile=0x344) returned 0x1 [0137.883] WriteFile (in: hFile=0x344, lpBuffer=0x2733758*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2733758*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0137.884] CloseHandle (hObject=0x344) returned 1 [0137.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x89 [0137.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x8a [0137.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.889] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x89 [0137.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x8a [0137.890] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.892] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0137.893] GetFileType (hFile=0x344) returned 0x1 [0137.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.893] GetFileType (hFile=0x344) returned 0x1 [0137.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0137.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0137.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.897] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0137.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0137.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.899] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x89 [0137.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8a [0137.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.904] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x89 [0137.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8a [0137.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.906] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0137.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0137.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.909] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0137.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0137.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.910] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x89 [0137.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x8a [0137.912] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.916] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x89 [0137.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x8a [0137.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.917] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x89 [0137.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x8a [0137.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.920] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x89 [0137.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x8a [0137.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.921] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", lpFilePart=0x0) returned 0x89 [0137.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x8a [0137.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.925] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", lpFilePart=0x0) returned 0x89 [0137.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x8a [0137.926] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.926] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0137.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0137.930] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.930] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0137.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0137.931] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.931] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", lpFilePart=0x0) returned 0x89 [0137.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", lpFilePart=0x0) returned 0x8a [0137.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.936] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", lpFilePart=0x0) returned 0x89 [0137.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", lpFilePart=0x0) returned 0x8a [0137.936] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.937] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0137.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0137.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.943] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0137.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0137.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.944] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0137.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0137.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.949] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0137.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0137.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.950] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", lpFilePart=0x0) returned 0x89 [0137.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x8a [0137.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.953] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", lpFilePart=0x0) returned 0x89 [0137.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x8a [0137.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.954] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", lpFilePart=0x0) returned 0x89 [0137.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", lpFilePart=0x0) returned 0x8a [0137.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.958] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", lpFilePart=0x0) returned 0x89 [0137.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", lpFilePart=0x0) returned 0x8a [0137.958] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.959] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", lpFilePart=0x0) returned 0x89 [0137.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x8a [0137.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.962] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", lpFilePart=0x0) returned 0x89 [0137.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x8a [0137.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.963] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0137.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0137.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.967] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0137.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0137.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.968] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", lpFilePart=0x0) returned 0x89 [0137.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", lpFilePart=0x0) returned 0x8a [0137.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.972] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", lpFilePart=0x0) returned 0x89 [0137.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", lpFilePart=0x0) returned 0x8a [0137.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0137.986] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0137.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0137.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0137.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0137.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0137.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0137.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0137.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0137.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0137.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.071] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0138.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0138.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.072] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0138.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0138.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.074] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0138.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0138.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.075] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0138.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0138.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.078] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0138.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0138.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.079] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0138.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0138.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.081] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0138.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0138.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.082] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0138.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0138.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0138.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.085] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0138.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0138.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.085] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0138.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0138.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0138.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0138.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0138.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.089] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0138.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0138.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.092] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0138.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0138.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.093] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", lpFilePart=0x0) returned 0x89 [0138.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", lpFilePart=0x0) returned 0x8a [0138.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.095] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", lpFilePart=0x0) returned 0x89 [0138.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", lpFilePart=0x0) returned 0x8a [0138.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.096] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0138.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0138.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.102] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0138.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0138.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.103] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0138.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0138.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.105] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0138.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0138.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.106] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0138.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0138.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.113] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0138.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0138.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.114] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0138.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0138.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.116] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0138.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0138.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.117] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x89 [0138.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8a [0138.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.120] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x89 [0138.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8a [0138.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.121] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x89 [0138.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8a [0138.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x89 [0138.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8a [0138.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x89 [0138.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8a [0138.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.128] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x89 [0138.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8a [0138.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.128] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0138.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0138.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.131] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0138.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0138.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.132] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0138.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0138.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.135] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0138.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0138.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.136] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0138.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0138.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.138] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0138.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0138.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.139] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x89 [0138.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x8a [0138.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.142] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x89 [0138.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x8a [0138.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.142] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0138.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0138.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.145] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0138.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0138.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.145] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0138.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0138.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0138.147] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.148] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0138.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0138.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.149] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0138.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x8c [0138.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x8d [0138.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.152] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x8c [0138.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.153] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.156] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.157] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.157] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.159] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.160] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.160] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.164] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.166] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.166] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.173] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.178] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.179] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.183] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.185] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.186] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.189] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x32a2e [0138.283] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.286] GetFileType (hFile=0x344) returned 0x1 [0138.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.289] GetFileType (hFile=0x344) returned 0x1 [0138.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf85f80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x32a30)) returned 1 [0138.296] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.symmyware")) returned 1 [0138.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0138.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.298] GetFileType (hFile=0x344) returned 0x1 [0138.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0138.298] GetFileType (hFile=0x344) returned 0x1 [0138.298] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x3b059 [0138.299] ReadFile (in: hFile=0x344, lpBuffer=0x12905210, nNumberOfBytesToRead=0x3b059, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x12905210*, lpNumberOfBytesRead=0x12d938*=0x3b059, lpOverlapped=0x0) returned 1 [0138.310] CloseHandle (hObject=0x344) returned 1 [0138.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0138.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0138.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.407] GetFileType (hFile=0x344) returned 0x1 [0138.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0138.407] GetFileType (hFile=0x344) returned 0x1 [0138.407] WriteFile (in: hFile=0x344, lpBuffer=0x26c8368*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26c8368*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0138.409] CloseHandle (hObject=0x344) returned 1 [0138.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0138.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0138.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.410] GetFileType (hFile=0x344) returned 0x1 [0138.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0138.410] GetFileType (hFile=0x344) returned 0x1 [0138.410] WriteFile (in: hFile=0x344, lpBuffer=0x129402a8*, nNumberOfBytesToWrite=0x3b060, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x129402a8*, lpNumberOfBytesWritten=0x12d998*=0x3b060, lpOverlapped=0x0) returned 1 [0138.417] CloseHandle (hObject=0x344) returned 1 [0138.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x90 [0138.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.SYMMYWARE", lpFilePart=0x0) returned 0x9a [0138.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10a87f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3b060)) returned 1 [0138.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0138.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.symmyware")) returned 1 [0138.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0138.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x86 [0138.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.423] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0138.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.424] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x85 [0138.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x86 [0138.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0138.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0 [0138.426] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0138.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.427] GetFileType (hFile=0x344) returned 0x1 [0138.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.427] GetFileType (hFile=0x344) returned 0x1 [0138.427] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x6cd [0138.427] ReadFile (in: hFile=0x344, lpBuffer=0x26cd780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cd780*, lpNumberOfBytesRead=0x12d8b8*=0x6cd, lpOverlapped=0x0) returned 1 [0138.429] CloseHandle (hObject=0x344) returned 1 [0138.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0138.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.487] GetFileType (hFile=0x344) returned 0x1 [0138.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.488] GetFileType (hFile=0x344) returned 0x1 [0138.488] WriteFile (in: hFile=0x344, lpBuffer=0x2721130*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2721130*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.489] CloseHandle (hObject=0x344) returned 1 [0138.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0138.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.492] GetFileType (hFile=0x344) returned 0x1 [0138.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.492] GetFileType (hFile=0x344) returned 0x1 [0138.492] WriteFile (in: hFile=0x344, lpBuffer=0x2722350*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2722350*, lpNumberOfBytesWritten=0x12d7c8*=0x6d0, lpOverlapped=0x0) returned 1 [0138.494] CloseHandle (hObject=0x344) returned 1 [0138.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x95 [0138.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.SYMMYWARE", lpFilePart=0x0) returned 0x9f [0138.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1158470, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0138.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.symmyware")) returned 1 [0138.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x93 [0138.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0138.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.501] GetFileType (hFile=0x344) returned 0x1 [0138.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0138.501] GetFileType (hFile=0x344) returned 0x1 [0138.502] WriteFile (in: hFile=0x344, lpBuffer=0x2725ae8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2725ae8*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0138.503] CloseHandle (hObject=0x344) returned 1 [0138.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0138.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x87 [0138.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0138.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.506] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x86 [0138.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x87 [0138.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0138.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0 [0138.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0138.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.511] GetFileType (hFile=0x344) returned 0x1 [0138.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.511] GetFileType (hFile=0x344) returned 0x1 [0138.511] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x32a [0138.511] ReadFile (in: hFile=0x344, lpBuffer=0x272a640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x272a640*, lpNumberOfBytesRead=0x12d8b8*=0x32a, lpOverlapped=0x0) returned 1 [0138.514] CloseHandle (hObject=0x344) returned 1 [0138.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0138.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.525] GetFileType (hFile=0x344) returned 0x1 [0138.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.525] GetFileType (hFile=0x344) returned 0x1 [0138.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0138.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.528] GetFileType (hFile=0x344) returned 0x1 [0138.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.528] GetFileType (hFile=0x344) returned 0x1 [0138.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0138.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.SYMMYWARE", lpFilePart=0x0) returned 0xa1 [0138.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x119ca30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0138.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.530] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.symmyware")) returned 1 [0138.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x94 [0138.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0138.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.531] GetFileType (hFile=0x344) returned 0x1 [0138.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0138.531] GetFileType (hFile=0x344) returned 0x1 [0138.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0138.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0138.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.535] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.536] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0138.536] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0138.537] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0138.537] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0138.537] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0138.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0138.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0138.538] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0138.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.539] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0138.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0138.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.542] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.542] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0138.542] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0138.542] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0138.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0138.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0138.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0138.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0138.544] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0138.544] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0138.544] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0138.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.547] GetFileType (hFile=0x344) returned 0x1 [0138.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.547] GetFileType (hFile=0x344) returned 0x1 [0138.547] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x1109 [0138.547] ReadFile (in: hFile=0x344, lpBuffer=0x2789040, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x2789040*, lpNumberOfBytesRead=0x12d8b8*=0x1109, lpOverlapped=0x0) returned 1 [0138.550] CloseHandle (hObject=0x344) returned 1 [0138.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0138.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.605] GetFileType (hFile=0x344) returned 0x1 [0138.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.605] GetFileType (hFile=0x344) returned 0x1 [0138.605] WriteFile (in: hFile=0x344, lpBuffer=0x27dfc58*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x27dfc58*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.606] CloseHandle (hObject=0x344) returned 1 [0138.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0138.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.608] GetFileType (hFile=0x344) returned 0x1 [0138.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.608] GetFileType (hFile=0x344) returned 0x1 [0138.608] WriteFile (in: hFile=0x344, lpBuffer=0x27dd428*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x12d918, lpOverlapped=0x0 | out: lpBuffer=0x27dd428*, lpNumberOfBytesWritten=0x12d918*=0x1110, lpOverlapped=0x0) returned 1 [0138.610] CloseHandle (hObject=0x344) returned 1 [0138.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0138.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.SYMMYWARE", lpFilePart=0x0) returned 0x9f [0138.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x125ff30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0138.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.symmyware")) returned 1 [0138.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0138.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.614] GetFileType (hFile=0x344) returned 0x1 [0138.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.614] GetFileType (hFile=0x344) returned 0x1 [0138.614] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x22c [0138.614] ReadFile (in: hFile=0x344, lpBuffer=0x27e16e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e16e0*, lpNumberOfBytesRead=0x12d8b8*=0x22c, lpOverlapped=0x0) returned 1 [0138.615] CloseHandle (hObject=0x344) returned 1 [0138.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0138.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.632] GetFileType (hFile=0x344) returned 0x1 [0138.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.632] GetFileType (hFile=0x344) returned 0x1 [0138.632] WriteFile (in: hFile=0x344, lpBuffer=0x2833780*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2833780*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.633] CloseHandle (hObject=0x344) returned 1 [0138.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0138.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.635] GetFileType (hFile=0x344) returned 0x1 [0138.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.635] GetFileType (hFile=0x344) returned 0x1 [0138.636] WriteFile (in: hFile=0x344, lpBuffer=0x2834998*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2834998*, lpNumberOfBytesWritten=0x12d7c8*=0x230, lpOverlapped=0x0) returned 1 [0138.637] CloseHandle (hObject=0x344) returned 1 [0138.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0138.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.SYMMYWARE", lpFilePart=0x0) returned 0x9e [0138.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x129a8b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0138.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.639] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.symmyware")) returned 1 [0138.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0138.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.640] GetFileType (hFile=0x344) returned 0x1 [0138.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.641] GetFileType (hFile=0x344) returned 0x1 [0138.641] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xa0 [0138.641] ReadFile (in: hFile=0x344, lpBuffer=0x28360c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x28360c0*, lpNumberOfBytesRead=0x12d8b8*=0xa0, lpOverlapped=0x0) returned 1 [0138.642] CloseHandle (hObject=0x344) returned 1 [0138.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0138.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.653] GetFileType (hFile=0x344) returned 0x1 [0138.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.653] GetFileType (hFile=0x344) returned 0x1 [0138.653] WriteFile (in: hFile=0x344, lpBuffer=0x2887928*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2887928*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.654] CloseHandle (hObject=0x344) returned 1 [0138.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0138.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.655] GetFileType (hFile=0x344) returned 0x1 [0138.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.655] GetFileType (hFile=0x344) returned 0x1 [0138.656] WriteFile (in: hFile=0x344, lpBuffer=0x2888b78*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2888b78*, lpNumberOfBytesWritten=0x12d7c8*=0xb0, lpOverlapped=0x0) returned 1 [0138.657] CloseHandle (hObject=0x344) returned 1 [0138.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0138.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.SYMMYWARE", lpFilePart=0x0) returned 0xad [0138.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12bf2a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0138.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.659] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.symmyware")) returned 1 [0138.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0138.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.660] GetFileType (hFile=0x344) returned 0x1 [0138.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.660] GetFileType (hFile=0x344) returned 0x1 [0138.660] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xfc [0138.660] ReadFile (in: hFile=0x344, lpBuffer=0x288a378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x288a378*, lpNumberOfBytesRead=0x12d8b8*=0xfc, lpOverlapped=0x0) returned 1 [0138.662] CloseHandle (hObject=0x344) returned 1 [0138.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0138.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.746] GetFileType (hFile=0x344) returned 0x1 [0138.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.746] GetFileType (hFile=0x344) returned 0x1 [0138.746] WriteFile (in: hFile=0x344, lpBuffer=0x26dd6d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x26dd6d0*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.747] CloseHandle (hObject=0x344) returned 1 [0138.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0138.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.749] GetFileType (hFile=0x344) returned 0x1 [0138.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.749] GetFileType (hFile=0x344) returned 0x1 [0138.749] WriteFile (in: hFile=0x344, lpBuffer=0x26de940*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x26de940*, lpNumberOfBytesWritten=0x12d7c8*=0x100, lpOverlapped=0x0) returned 1 [0138.750] CloseHandle (hObject=0x344) returned 1 [0138.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0138.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.SYMMYWARE", lpFilePart=0x0) returned 0xb3 [0138.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x135b6a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0138.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.757] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.symmyware")) returned 1 [0138.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0138.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.759] GetFileType (hFile=0x344) returned 0x1 [0138.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.759] GetFileType (hFile=0x344) returned 0x1 [0138.759] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xa0 [0138.759] ReadFile (in: hFile=0x344, lpBuffer=0x26e0100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e0100*, lpNumberOfBytesRead=0x12d8b8*=0xa0, lpOverlapped=0x0) returned 1 [0138.760] CloseHandle (hObject=0x344) returned 1 [0138.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0138.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.773] GetFileType (hFile=0x344) returned 0x1 [0138.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.773] GetFileType (hFile=0x344) returned 0x1 [0138.773] WriteFile (in: hFile=0x344, lpBuffer=0x2731b70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2731b70*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.775] CloseHandle (hObject=0x344) returned 1 [0138.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0138.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.777] GetFileType (hFile=0x344) returned 0x1 [0138.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.777] GetFileType (hFile=0x344) returned 0x1 [0138.777] WriteFile (in: hFile=0x344, lpBuffer=0x2732de0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2732de0*, lpNumberOfBytesWritten=0x12d7c8*=0xb0, lpOverlapped=0x0) returned 1 [0138.779] CloseHandle (hObject=0x344) returned 1 [0138.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0138.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.SYMMYWARE", lpFilePart=0x0) returned 0xb3 [0138.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x138eaf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0138.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.783] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.symmyware")) returned 1 [0138.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0138.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.785] GetFileType (hFile=0x344) returned 0x1 [0138.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.786] GetFileType (hFile=0x344) returned 0x1 [0138.786] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xa6 [0138.786] ReadFile (in: hFile=0x344, lpBuffer=0x27345b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x27345b0*, lpNumberOfBytesRead=0x12d8b8*=0xa6, lpOverlapped=0x0) returned 1 [0138.787] CloseHandle (hObject=0x344) returned 1 [0138.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0138.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.795] GetFileType (hFile=0x344) returned 0x1 [0138.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.795] GetFileType (hFile=0x344) returned 0x1 [0138.796] WriteFile (in: hFile=0x344, lpBuffer=0x2785e40*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2785e40*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.797] CloseHandle (hObject=0x344) returned 1 [0138.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0138.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.799] GetFileType (hFile=0x344) returned 0x1 [0138.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.799] GetFileType (hFile=0x344) returned 0x1 [0138.799] WriteFile (in: hFile=0x344, lpBuffer=0x27870b8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x27870b8*, lpNumberOfBytesWritten=0x12d7c8*=0xb0, lpOverlapped=0x0) returned 1 [0138.801] CloseHandle (hObject=0x344) returned 1 [0138.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0138.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.SYMMYWARE", lpFilePart=0x0) returned 0xb6 [0138.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x13bd120, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0138.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.803] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.symmyware")) returned 1 [0138.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0138.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.804] GetFileType (hFile=0x344) returned 0x1 [0138.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.804] GetFileType (hFile=0x344) returned 0x1 [0138.805] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xa0 [0138.805] ReadFile (in: hFile=0x344, lpBuffer=0x2788890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x2788890*, lpNumberOfBytesRead=0x12d8b8*=0xa0, lpOverlapped=0x0) returned 1 [0138.806] CloseHandle (hObject=0x344) returned 1 [0138.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0138.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0138.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.814] GetFileType (hFile=0x344) returned 0x1 [0138.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0138.815] GetFileType (hFile=0x344) returned 0x1 [0138.815] WriteFile (in: hFile=0x344, lpBuffer=0x27da118*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x27da118*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0138.818] CloseHandle (hObject=0x344) returned 1 [0138.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0138.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0138.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0138.819] GetFileType (hFile=0x344) returned 0x1 [0138.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0138.819] GetFileType (hFile=0x344) returned 0x1 [0138.820] WriteFile (in: hFile=0x344, lpBuffer=0x27db388*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x27db388*, lpNumberOfBytesWritten=0x12d7c8*=0xb0, lpOverlapped=0x0) returned 1 [0138.821] CloseHandle (hObject=0x344) returned 1 [0138.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0138.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.SYMMYWARE", lpFilePart=0x0) returned 0xb5 [0138.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x13eb750, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0138.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0138.823] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.symmyware")) returned 1 [0138.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x96 [0138.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0138.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.825] GetFileType (hFile=0x344) returned 0x1 [0138.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0138.825] GetFileType (hFile=0x344) returned 0x1 [0138.826] WriteFile (in: hFile=0x344, lpBuffer=0x27debb8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27debb8*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0138.827] CloseHandle (hObject=0x344) returned 1 [0138.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0138.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0138.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.831] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.831] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0138.831] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0138.832] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0138.832] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0138.832] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0138.832] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0138.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0138.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0138.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0138.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0138.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0138.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0138.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0138.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0138.835] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0138.835] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0138.835] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0138.835] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0138.835] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0138.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0138.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0138.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0138.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0138.836] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0138.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0138.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0138.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0138.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0138.837] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0138.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0138.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0138.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0138.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0138.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0138.839] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0138.839] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0138.839] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0138.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0138.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0138.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0138.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0138.841] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0138.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0138.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0138.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0138.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0138.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0138.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0138.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0138.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0138.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0138.847] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0138.848] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0138.849] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0138.850] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0138.850] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0138.850] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.850] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0138.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0138.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0138.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0138.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.853] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.853] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.853] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.853] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0138.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0138.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.854] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.855] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.856] GetFileType (hFile=0x344) returned 0x1 [0138.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.856] GetFileType (hFile=0x344) returned 0x1 [0138.856] WriteFile (in: hFile=0x344, lpBuffer=0x27f7248*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x27f7248*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.857] CloseHandle (hObject=0x344) returned 1 [0138.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0138.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0138.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.859] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.860] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.860] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.860] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0138.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0138.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.861] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.862] GetFileType (hFile=0x344) returned 0x1 [0138.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.863] GetFileType (hFile=0x344) returned 0x1 [0138.863] WriteFile (in: hFile=0x344, lpBuffer=0x27fdd28*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x27fdd28*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.864] CloseHandle (hObject=0x344) returned 1 [0138.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0138.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0138.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.865] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.866] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0138.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0138.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.868] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.868] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.869] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0138.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0138.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.874] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0138.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0138.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.875] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.875] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.876] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0138.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0138.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.879] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0138.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0138.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.881] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0138.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0138.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.885] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0138.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0138.885] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.886] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0138.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0138.888] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.888] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0138.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0138.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.889] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.889] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.889] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.889] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0138.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0138.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.893] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0138.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0138.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.894] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9e [0138.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0138.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0138.897] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.897] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.897] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.897] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.897] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0138.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0138.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.898] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.898] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.898] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.898] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0138.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0138.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.902] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.902] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.902] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.902] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0138.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0138.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.903] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9f [0138.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0138.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0138.906] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.907] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0138.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0138.907] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.908] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.908] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.910] WriteFile (in: hFile=0x344, lpBuffer=0x283a0e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x283a0e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0138.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0138.911] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.914] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0138.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0138.914] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.915] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.915] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.915] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.916] WriteFile (in: hFile=0x344, lpBuffer=0x2840bc8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2840bc8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0138.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0138.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.919] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0138.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0138.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.920] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.921] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9c [0138.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.923] WriteFile (in: hFile=0x344, lpBuffer=0x2847748*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2847748*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0138.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0138.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.927] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0138.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0138.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.929] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.930] WriteFile (in: hFile=0x344, lpBuffer=0x284e228*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x284e228*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0138.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0138.933] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.933] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.933] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.933] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.933] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0138.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0138.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.934] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.935] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.935] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.935] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.937] WriteFile (in: hFile=0x344, lpBuffer=0x2854d08*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2854d08*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0138.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0138.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.941] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.941] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.941] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.941] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0138.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0138.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.942] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.942] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.942] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.943] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.944] WriteFile (in: hFile=0x344, lpBuffer=0x285b7e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x285b7e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0138.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0138.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0138.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.946] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.946] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.946] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.946] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0138.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0138.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.947] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.947] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.947] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.947] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0138.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0138.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.951] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.951] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.951] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.951] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0138.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0138.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.951] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.951] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.952] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.952] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0138.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0138.954] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.954] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.954] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.954] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.954] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0138.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0138.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.955] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.955] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.955] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.955] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0138.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0138.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.958] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.959] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.959] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.959] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0138.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0138.959] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.959] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.960] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.960] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.960] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0138.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0138.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.962] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.963] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0138.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0138.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.964] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0138.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0138.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.967] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.967] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0138.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0138.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.968] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.968] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0138.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0138.971] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.971] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0138.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0138.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.972] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0138.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0138.975] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.977] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.977] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.977] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.977] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0138.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0138.978] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.978] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.978] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.978] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.978] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0138.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0138.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.981] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0138.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0138.981] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.982] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.982] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.982] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0138.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0138.984] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.985] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.985] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.985] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.985] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0138.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0138.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.986] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0138.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0138.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0138.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0138.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0138.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0138.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.989] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.989] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.990] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.990] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0138.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0138.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0138.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0138.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.990] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.990] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.991] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0138.991] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9e [0138.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0138.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0138.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0138.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.995] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.995] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0138.995] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.995] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0138.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0138.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.996] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9e [0138.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0138.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0138.998] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.998] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0138.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0138.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0138.999] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0138.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0139.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0139.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.002] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0139.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0139.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.003] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0139.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0139.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.005] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0139.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0139.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.006] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0139.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0139.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.010] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0139.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0139.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.010] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0139.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0139.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.023] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0139.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0139.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.026] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.027] GetFileType (hFile=0x344) returned 0x1 [0139.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.027] GetFileType (hFile=0x344) returned 0x1 [0139.028] WriteFile (in: hFile=0x344, lpBuffer=0x26d1280*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26d1280*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.030] CloseHandle (hObject=0x344) returned 1 [0139.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0139.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0139.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.034] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0139.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0139.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.036] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.037] GetFileType (hFile=0x344) returned 0x1 [0139.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.037] GetFileType (hFile=0x344) returned 0x1 [0139.038] WriteFile (in: hFile=0x344, lpBuffer=0x26d7d60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26d7d60*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.039] CloseHandle (hObject=0x344) returned 1 [0139.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0139.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8e [0139.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.041] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0139.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8e [0139.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.043] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.044] GetFileType (hFile=0x344) returned 0x1 [0139.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.044] GetFileType (hFile=0x344) returned 0x1 [0139.045] WriteFile (in: hFile=0x344, lpBuffer=0x26de840*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26de840*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.046] CloseHandle (hObject=0x344) returned 1 [0139.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x8d [0139.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8e [0139.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.048] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x8d [0139.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8e [0139.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.050] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.051] GetFileType (hFile=0x344) returned 0x1 [0139.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.051] GetFileType (hFile=0x344) returned 0x1 [0139.051] WriteFile (in: hFile=0x344, lpBuffer=0x26e5320*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26e5320*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.052] CloseHandle (hObject=0x344) returned 1 [0139.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x8d [0139.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8e [0139.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.054] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x8d [0139.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8e [0139.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.055] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.056] GetFileType (hFile=0x344) returned 0x1 [0139.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.056] GetFileType (hFile=0x344) returned 0x1 [0139.057] WriteFile (in: hFile=0x344, lpBuffer=0x26ebe00*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26ebe00*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.058] CloseHandle (hObject=0x344) returned 1 [0139.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x8d [0139.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8e [0139.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.070] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.071] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x8d [0139.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8e [0139.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.073] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9b [0139.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.074] GetFileType (hFile=0x344) returned 0x1 [0139.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.074] GetFileType (hFile=0x344) returned 0x1 [0139.075] WriteFile (in: hFile=0x344, lpBuffer=0x26f28e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26f28e0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.076] CloseHandle (hObject=0x344) returned 1 [0139.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x90 [0139.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x91 [0139.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.081] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x90 [0139.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x91 [0139.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.083] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9e [0139.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.084] GetFileType (hFile=0x344) returned 0x1 [0139.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.085] GetFileType (hFile=0x344) returned 0x1 [0139.085] WriteFile (in: hFile=0x344, lpBuffer=0x26f94a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26f94a0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.086] CloseHandle (hObject=0x344) returned 1 [0139.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x90 [0139.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x91 [0139.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x90 [0139.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x91 [0139.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.089] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.089] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9e [0139.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.090] GetFileType (hFile=0x344) returned 0x1 [0139.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.090] GetFileType (hFile=0x344) returned 0x1 [0139.091] WriteFile (in: hFile=0x344, lpBuffer=0x2700060*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2700060*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.092] CloseHandle (hObject=0x344) returned 1 [0139.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0139.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0139.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.093] GetFileType (hFile=0x344) returned 0x1 [0139.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0139.093] GetFileType (hFile=0x344) returned 0x1 [0139.094] WriteFile (in: hFile=0x344, lpBuffer=0x2703478*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2703478*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0139.095] CloseHandle (hObject=0x344) returned 1 [0139.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x8b [0139.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x8c [0139.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0139.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.096] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0139.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0139.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x8b [0139.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x8c [0139.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0139.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0139.098] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0139.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0139.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x99 [0139.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0139.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.098] GetFileType (hFile=0x344) returned 0x1 [0139.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0139.099] GetFileType (hFile=0x344) returned 0x1 [0139.099] WriteFile (in: hFile=0x344, lpBuffer=0x2709f88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x2709f88*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0139.100] CloseHandle (hObject=0x344) returned 1 [0139.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x8f [0139.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0139.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.101] GetFileType (hFile=0x344) returned 0x1 [0139.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0139.101] GetFileType (hFile=0x344) returned 0x1 [0139.102] WriteFile (in: hFile=0x344, lpBuffer=0x270d370*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d8e8, lpOverlapped=0x0 | out: lpBuffer=0x270d370*, lpNumberOfBytesWritten=0x12d8e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.103] CloseHandle (hObject=0x344) returned 1 [0139.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0139.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0139.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.104] GetFileType (hFile=0x344) returned 0x1 [0139.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0139.104] GetFileType (hFile=0x344) returned 0x1 [0139.105] WriteFile (in: hFile=0x344, lpBuffer=0x2710738*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d968, lpOverlapped=0x0 | out: lpBuffer=0x2710738*, lpNumberOfBytesWritten=0x12d968*=0x4aa, lpOverlapped=0x0) returned 1 [0139.106] CloseHandle (hObject=0x344) returned 1 [0139.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0139.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x77 [0139.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x78 [0139.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0139.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0 [0139.108] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0139.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0139.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0139.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x77 [0139.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x78 [0139.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0139.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.110] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0139.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0139.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0139.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x7d [0139.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x7e [0139.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0139.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0139.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0139.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0139.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0139.116] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0139.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0139.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0139.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x7d [0139.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x7e [0139.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0139.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0139.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0139.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0139.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.120] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0139.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0139.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0139.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.124] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x180f [0139.124] ReadFile (in: hFile=0x344, lpBuffer=0x2718e90, nNumberOfBytesToRead=0x180f, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2718e90*, lpNumberOfBytesRead=0x12d938*=0x180f, lpOverlapped=0x0) returned 1 [0139.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0139.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.192] GetFileType (hFile=0x344) returned 0x1 [0139.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.192] GetFileType (hFile=0x344) returned 0x1 [0139.192] WriteFile (in: hFile=0x344, lpBuffer=0x2772660*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2772660*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.194] CloseHandle (hObject=0x344) returned 1 [0139.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0139.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.197] GetFileType (hFile=0x344) returned 0x1 [0139.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.197] GetFileType (hFile=0x344) returned 0x1 [0139.197] WriteFile (in: hFile=0x344, lpBuffer=0x276f760*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x276f760*, lpNumberOfBytesWritten=0x12d998*=0x1810, lpOverlapped=0x0) returned 1 [0139.200] CloseHandle (hObject=0x344) returned 1 [0139.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0139.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0139.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x176b740, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1810)) returned 1 [0139.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.203] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.symmyware")) returned 1 [0139.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0139.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0139.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0139.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0139.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0139.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0139.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0139.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0139.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0139.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0139.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0139.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0139.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0139.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0139.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0139.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0139.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0139.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0139.213] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0139.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0139.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0139.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0139.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0139.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0139.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0139.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0139.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0139.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0139.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0139.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0139.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0139.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0139.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0139.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0139.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0139.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0139.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0139.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0139.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0139.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0139.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0139.221] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0139.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0139.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0139.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0139.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.224] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.224] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0139.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0139.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0139.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0139.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0139.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0139.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0139.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0139.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0139.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0139.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0139.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0139.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0139.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0139.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0139.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0139.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0139.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0139.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0139.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0139.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0139.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0139.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0139.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0139.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0139.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0139.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0139.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0139.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0139.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0139.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0139.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0139.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0139.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0139.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0139.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0139.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0139.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0139.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.234] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0139.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0139.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0139.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0139.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.239] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0139.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0139.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.240] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.241] GetFileType (hFile=0x344) returned 0x1 [0139.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.242] GetFileType (hFile=0x344) returned 0x1 [0139.242] WriteFile (in: hFile=0x344, lpBuffer=0x2789fb0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2789fb0*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0139.243] CloseHandle (hObject=0x344) returned 1 [0139.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0139.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0139.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.245] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0139.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0139.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.247] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.248] GetFileType (hFile=0x344) returned 0x1 [0139.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.248] GetFileType (hFile=0x344) returned 0x1 [0139.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0139.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0139.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.252] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0139.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0139.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.254] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.255] GetFileType (hFile=0x344) returned 0x1 [0139.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.255] GetFileType (hFile=0x344) returned 0x1 [0139.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0139.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0139.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.258] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.258] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.259] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.259] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0139.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0139.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.261] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.262] GetFileType (hFile=0x344) returned 0x1 [0139.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.262] GetFileType (hFile=0x344) returned 0x1 [0139.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0139.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0139.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.267] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0139.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0139.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.269] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.269] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.270] GetFileType (hFile=0x344) returned 0x1 [0139.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.270] GetFileType (hFile=0x344) returned 0x1 [0139.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0139.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0139.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.275] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.275] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.276] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.276] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0139.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0139.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.277] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.278] GetFileType (hFile=0x344) returned 0x1 [0139.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.279] GetFileType (hFile=0x344) returned 0x1 [0139.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0139.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0139.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0139.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0139.283] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.284] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0139.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0139.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0139.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0139.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.289] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.289] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0139.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0139.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.292] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0139.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0139.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.293] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0139.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0139.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.298] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0139.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0139.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.300] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0139.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0139.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.304] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0139.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0139.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.305] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.305] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x98 [0139.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0139.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0139.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.308] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.309] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.309] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.309] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0139.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0139.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.310] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.311] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0139.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0139.314] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.315] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.315] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0139.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0139.315] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.316] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0139.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0139.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.320] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0139.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0139.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.322] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.322] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0139.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0139.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.327] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0139.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0139.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.329] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0139.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0139.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.334] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0139.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0139.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.335] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0139.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0139.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.340] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0139.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0139.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.342] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0139.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0139.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.346] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0139.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0139.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.347] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0139.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0139.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0139.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0139.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0139.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0139.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0139.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0139.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0139.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.352] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.352] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.352] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.352] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0139.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0139.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.355] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0139.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0139.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.356] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0139.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0139.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0139.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0139.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.360] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0139.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0139.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.363] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0139.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0139.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.365] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.365] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0139.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0139.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.368] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0139.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0139.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0139.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0139.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.372] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0139.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0139.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.373] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0139.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0139.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.377] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0139.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0139.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.378] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0139.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0139.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0139.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.381] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.381] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.381] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.381] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0139.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0139.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.382] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0139.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0139.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0139.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.385] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.385] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.385] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.385] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0139.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0139.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.386] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.386] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.386] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.386] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0139.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0139.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.390] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0139.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0139.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0139.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0139.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0139.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x8a [0139.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.394] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x89 [0139.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x8a [0139.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.394] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0139.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0139.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.397] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0139.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0139.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0139.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0139.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.401] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0139.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0139.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.401] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0139.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0139.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.404] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0139.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0139.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.404] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0139.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0139.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.407] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0139.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0139.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.407] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0139.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0139.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.410] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0139.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0139.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.410] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0139.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0139.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.412] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0139.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0139.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.413] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0139.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0139.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.415] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0139.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0139.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.416] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x97 [0139.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0139.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0139.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.418] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0139.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0139.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.419] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0139.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0139.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.421] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.422] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.426] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.426] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.433] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.433] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.438] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0139.440] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0139.443] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x8c0bf [0139.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x91 [0139.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.597] GetFileType (hFile=0x344) returned 0x1 [0139.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.597] GetFileType (hFile=0x344) returned 0x1 [0139.597] WriteFile (in: hFile=0x344, lpBuffer=0x26f2038*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26f2038*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.599] CloseHandle (hObject=0x344) returned 1 [0139.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x91 [0139.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.601] GetFileType (hFile=0x344) returned 0x1 [0139.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.601] GetFileType (hFile=0x344) returned 0x1 [0139.601] WriteFile (in: hFile=0x344, lpBuffer=0x12876468*, nNumberOfBytesToWrite=0x8c0c0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x12876468*, lpNumberOfBytesWritten=0x12d998*=0x8c0c0, lpOverlapped=0x0) returned 1 [0139.615] CloseHandle (hObject=0x344) returned 1 [0139.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x91 [0139.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.SYMMYWARE", lpFilePart=0x0) returned 0x9b [0139.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1b40e60, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8c0c0)) returned 1 [0139.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.629] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.symmyware")) returned 1 [0139.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0139.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.631] GetFileType (hFile=0x344) returned 0x1 [0139.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.631] GetFileType (hFile=0x344) returned 0x1 [0139.631] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xa89c [0139.632] ReadFile (in: hFile=0x344, lpBuffer=0x26f3868, nNumberOfBytesToRead=0xa89c, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x26f3868*, lpNumberOfBytesRead=0x12d938*=0xa89c, lpOverlapped=0x0) returned 1 [0139.634] CloseHandle (hObject=0x344) returned 1 [0139.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0139.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.699] GetFileType (hFile=0x344) returned 0x1 [0139.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.699] GetFileType (hFile=0x344) returned 0x1 [0139.699] WriteFile (in: hFile=0x344, lpBuffer=0x26db200*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26db200*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.703] CloseHandle (hObject=0x344) returned 1 [0139.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0139.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.705] GetFileType (hFile=0x344) returned 0x1 [0139.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.705] GetFileType (hFile=0x344) returned 0x1 [0139.705] WriteFile (in: hFile=0x344, lpBuffer=0x26cf228*, nNumberOfBytesToWrite=0xa8a0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x26cf228*, lpNumberOfBytesWritten=0x12d998*=0xa8a0, lpOverlapped=0x0) returned 1 [0139.707] CloseHandle (hObject=0x344) returned 1 [0139.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x9b [0139.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.SYMMYWARE", lpFilePart=0x0) returned 0xa5 [0139.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1bdd260, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa8a0)) returned 1 [0139.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.symmyware")) returned 1 [0139.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0139.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.711] GetFileType (hFile=0x344) returned 0x1 [0139.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.711] GetFileType (hFile=0x344) returned 0x1 [0139.711] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x181aa [0139.713] ReadFile (in: hFile=0x344, lpBuffer=0x126e72f8, nNumberOfBytesToRead=0x181aa, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x126e72f8*, lpNumberOfBytesRead=0x12d938*=0x181aa, lpOverlapped=0x0) returned 1 [0139.716] CloseHandle (hObject=0x344) returned 1 [0139.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0139.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.795] GetFileType (hFile=0x344) returned 0x1 [0139.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.795] GetFileType (hFile=0x344) returned 0x1 [0139.795] WriteFile (in: hFile=0x344, lpBuffer=0x2737d00*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2737d00*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.796] CloseHandle (hObject=0x344) returned 1 [0139.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0139.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.798] GetFileType (hFile=0x344) returned 0x1 [0139.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.798] GetFileType (hFile=0x344) returned 0x1 [0139.798] WriteFile (in: hFile=0x344, lpBuffer=0x1275fc08*, nNumberOfBytesToWrite=0x181b0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x1275fc08*, lpNumberOfBytesWritten=0x12d998*=0x181b0, lpOverlapped=0x0) returned 1 [0139.801] CloseHandle (hObject=0x344) returned 1 [0139.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x9a [0139.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.SYMMYWARE", lpFilePart=0x0) returned 0xa4 [0139.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1cbdc20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x181b0)) returned 1 [0139.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.807] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.symmyware")) returned 1 [0139.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0139.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.809] GetFileType (hFile=0x344) returned 0x1 [0139.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.809] GetFileType (hFile=0x344) returned 0x1 [0139.809] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x111e1 [0139.809] ReadFile (in: hFile=0x344, lpBuffer=0x27395a0, nNumberOfBytesToRead=0x111e1, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x27395a0*, lpNumberOfBytesRead=0x12d938*=0x111e1, lpOverlapped=0x0) returned 1 [0139.811] CloseHandle (hObject=0x344) returned 1 [0139.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0139.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.824] GetFileType (hFile=0x344) returned 0x1 [0139.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.824] GetFileType (hFile=0x344) returned 0x1 [0139.824] WriteFile (in: hFile=0x344, lpBuffer=0x27d90e0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x27d90e0*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.825] CloseHandle (hObject=0x344) returned 1 [0139.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0139.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.826] GetFileType (hFile=0x344) returned 0x1 [0139.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.826] GetFileType (hFile=0x344) returned 0x1 [0139.826] WriteFile (in: hFile=0x344, lpBuffer=0x27c67b0*, nNumberOfBytesToWrite=0x111f0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x27c67b0*, lpNumberOfBytesWritten=0x12d998*=0x111f0, lpOverlapped=0x0) returned 1 [0139.828] CloseHandle (hObject=0x344) returned 1 [0139.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x9e [0139.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.SYMMYWARE", lpFilePart=0x0) returned 0xa8 [0139.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1cf5e90, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x111f0)) returned 1 [0139.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.831] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.symmyware")) returned 1 [0139.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0139.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.832] GetFileType (hFile=0x344) returned 0x1 [0139.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.832] GetFileType (hFile=0x344) returned 0x1 [0139.832] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x3a258 [0139.833] ReadFile (in: hFile=0x344, lpBuffer=0x1279a1e8, nNumberOfBytesToRead=0x3a258, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x1279a1e8*, lpNumberOfBytesRead=0x12d938*=0x3a258, lpOverlapped=0x0) returned 1 [0139.841] CloseHandle (hObject=0x344) returned 1 [0139.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0139.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0139.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0139.875] GetFileType (hFile=0x344) returned 0x1 [0139.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0139.875] GetFileType (hFile=0x344) returned 0x1 [0139.875] WriteFile (in: hFile=0x344, lpBuffer=0x282af40*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x282af40*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0139.877] CloseHandle (hObject=0x344) returned 1 [0139.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0139.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.879] GetFileType (hFile=0x344) returned 0x1 [0139.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.879] GetFileType (hFile=0x344) returned 0x1 [0139.879] WriteFile (in: hFile=0x344, lpBuffer=0x128bce60*, nNumberOfBytesToWrite=0x3a260, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x128bce60*, lpNumberOfBytesWritten=0x12d998*=0x3a260, lpOverlapped=0x0) returned 1 [0139.885] CloseHandle (hObject=0x344) returned 1 [0139.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x9c [0139.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.SYMMYWARE", lpFilePart=0x0) returned 0xa6 [0139.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0139.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1d79bf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3a260)) returned 1 [0139.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0139.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.symmyware")) returned 1 [0139.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0139.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0139.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0139.894] GetFileType (hFile=0x344) returned 0x1 [0139.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0139.894] GetFileType (hFile=0x344) returned 0x1 [0139.894] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xce17 [0139.894] ReadFile (in: hFile=0x344, lpBuffer=0x282c7d0, nNumberOfBytesToRead=0xce17, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x282c7d0*, lpNumberOfBytesRead=0x12d938*=0xce17, lpOverlapped=0x0) returned 1 [0139.897] CloseHandle (hObject=0x344) returned 1 [0140.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0140.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.034] GetFileType (hFile=0x344) returned 0x1 [0140.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.034] GetFileType (hFile=0x344) returned 0x1 [0140.034] WriteFile (in: hFile=0x344, lpBuffer=0x273bc10*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x273bc10*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.036] CloseHandle (hObject=0x344) returned 1 [0140.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0140.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.037] GetFileType (hFile=0x344) returned 0x1 [0140.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.037] GetFileType (hFile=0x344) returned 0x1 [0140.037] WriteFile (in: hFile=0x344, lpBuffer=0x272d6d0*, nNumberOfBytesToWrite=0xce20, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x272d6d0*, lpNumberOfBytesWritten=0x12d998*=0xce20, lpOverlapped=0x0) returned 1 [0140.039] CloseHandle (hObject=0x344) returned 1 [0140.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x95 [0140.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.SYMMYWARE", lpFilePart=0x0) returned 0x9f [0140.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ede310, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xce20)) returned 1 [0140.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.symmyware")) returned 1 [0140.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0140.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.046] GetFileType (hFile=0x344) returned 0x1 [0140.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.046] GetFileType (hFile=0x344) returned 0x1 [0140.046] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xc878 [0140.046] ReadFile (in: hFile=0x344, lpBuffer=0x273d440, nNumberOfBytesToRead=0xc878, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x273d440*, lpNumberOfBytesRead=0x12d938*=0xc878, lpOverlapped=0x0) returned 1 [0140.049] CloseHandle (hObject=0x344) returned 1 [0140.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0140.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.061] GetFileType (hFile=0x344) returned 0x1 [0140.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.061] GetFileType (hFile=0x344) returned 0x1 [0140.061] WriteFile (in: hFile=0x344, lpBuffer=0x27bfdd0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x27bfdd0*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.062] CloseHandle (hObject=0x344) returned 1 [0140.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0140.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.064] GetFileType (hFile=0x344) returned 0x1 [0140.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.064] GetFileType (hFile=0x344) returned 0x1 [0140.064] WriteFile (in: hFile=0x344, lpBuffer=0x27b1e40*, nNumberOfBytesToWrite=0xc880, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x27b1e40*, lpNumberOfBytesWritten=0x12d998*=0xc880, lpOverlapped=0x0) returned 1 [0140.066] CloseHandle (hObject=0x344) returned 1 [0140.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x90 [0140.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.SYMMYWARE", lpFilePart=0x0) returned 0x9a [0140.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1f16580, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc880)) returned 1 [0140.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.071] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.symmyware")) returned 1 [0140.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0140.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.073] GetFileType (hFile=0x344) returned 0x1 [0140.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.073] GetFileType (hFile=0x344) returned 0x1 [0140.073] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0xc26 [0140.073] ReadFile (in: hFile=0x344, lpBuffer=0x27c2228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x27c2228*, lpNumberOfBytesRead=0x12d938*=0xc26, lpOverlapped=0x0) returned 1 [0140.075] CloseHandle (hObject=0x344) returned 1 [0140.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0140.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.084] GetFileType (hFile=0x344) returned 0x1 [0140.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.084] GetFileType (hFile=0x344) returned 0x1 [0140.084] WriteFile (in: hFile=0x344, lpBuffer=0x28174d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x28174d0*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.086] CloseHandle (hObject=0x344) returned 1 [0140.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0140.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.089] GetFileType (hFile=0x344) returned 0x1 [0140.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.089] GetFileType (hFile=0x344) returned 0x1 [0140.089] WriteFile (in: hFile=0x344, lpBuffer=0x28186e8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x28186e8*, lpNumberOfBytesWritten=0x12d848*=0xc30, lpOverlapped=0x0) returned 1 [0140.090] CloseHandle (hObject=0x344) returned 1 [0140.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0140.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.SYMMYWARE", lpFilePart=0x0) returned 0x9d [0140.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1f472c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0140.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.symmyware")) returned 1 [0140.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0140.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.093] GetFileType (hFile=0x344) returned 0x1 [0140.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.094] GetFileType (hFile=0x344) returned 0x1 [0140.094] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x38a8 [0140.094] ReadFile (in: hFile=0x344, lpBuffer=0x2819d20, nNumberOfBytesToRead=0x38a8, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2819d20*, lpNumberOfBytesRead=0x12d938*=0x38a8, lpOverlapped=0x0) returned 1 [0140.096] CloseHandle (hObject=0x344) returned 1 [0140.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0140.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.107] GetFileType (hFile=0x344) returned 0x1 [0140.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.107] GetFileType (hFile=0x344) returned 0x1 [0140.107] WriteFile (in: hFile=0x344, lpBuffer=0x287f6f0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x287f6f0*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.109] CloseHandle (hObject=0x344) returned 1 [0140.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0140.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.111] GetFileType (hFile=0x344) returned 0x1 [0140.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.111] GetFileType (hFile=0x344) returned 0x1 [0140.111] WriteFile (in: hFile=0x344, lpBuffer=0x287a720*, nNumberOfBytesToWrite=0x38b0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x287a720*, lpNumberOfBytesWritten=0x12d998*=0x38b0, lpOverlapped=0x0) returned 1 [0140.113] CloseHandle (hObject=0x344) returned 1 [0140.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0140.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.SYMMYWARE", lpFilePart=0x0) returned 0x9e [0140.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1f78000, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1 [0140.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.116] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.symmyware")) returned 1 [0140.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0140.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.118] GetFileType (hFile=0x344) returned 0x1 [0140.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.118] GetFileType (hFile=0x344) returned 0x1 [0140.118] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x2b20 [0140.118] ReadFile (in: hFile=0x344, lpBuffer=0x2880f40, nNumberOfBytesToRead=0x2b20, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x2880f40*, lpNumberOfBytesRead=0x12d938*=0x2b20, lpOverlapped=0x0) returned 1 [0140.120] CloseHandle (hObject=0x344) returned 1 [0140.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0140.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.157] GetFileType (hFile=0x344) returned 0x1 [0140.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.157] GetFileType (hFile=0x344) returned 0x1 [0140.157] WriteFile (in: hFile=0x344, lpBuffer=0x26e8ab8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26e8ab8*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.158] CloseHandle (hObject=0x344) returned 1 [0140.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0140.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.160] GetFileType (hFile=0x344) returned 0x1 [0140.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.160] GetFileType (hFile=0x344) returned 0x1 [0140.160] WriteFile (in: hFile=0x344, lpBuffer=0x26e4858*, nNumberOfBytesToWrite=0x2b30, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x26e4858*, lpNumberOfBytesWritten=0x12d998*=0x2b30, lpOverlapped=0x0) returned 1 [0140.162] CloseHandle (hObject=0x344) returned 1 [0140.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x99 [0140.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.SYMMYWARE", lpFilePart=0x0) returned 0xa3 [0140.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1fe84e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2b30)) returned 1 [0140.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.symmyware")) returned 1 [0140.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0140.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.169] GetFileType (hFile=0x344) returned 0x1 [0140.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.169] GetFileType (hFile=0x344) returned 0x1 [0140.169] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x46039 [0140.170] ReadFile (in: hFile=0x344, lpBuffer=0x12929e68, nNumberOfBytesToRead=0x46039, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x12929e68*, lpNumberOfBytesRead=0x12d938*=0x46039, lpOverlapped=0x0) returned 1 [0140.430] CloseHandle (hObject=0x344) returned 1 [0140.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0140.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.537] GetFileType (hFile=0x344) returned 0x1 [0140.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.537] GetFileType (hFile=0x344) returned 0x1 [0140.538] WriteFile (in: hFile=0x344, lpBuffer=0x26c97a8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26c97a8*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.539] CloseHandle (hObject=0x344) returned 1 [0140.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0140.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.540] GetFileType (hFile=0x344) returned 0x1 [0140.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.541] GetFileType (hFile=0x344) returned 0x1 [0140.541] WriteFile (in: hFile=0x344, lpBuffer=0x1275e238*, nNumberOfBytesToWrite=0x46040, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x1275e238*, lpNumberOfBytesWritten=0x12d998*=0x46040, lpOverlapped=0x0) returned 1 [0140.548] CloseHandle (hObject=0x344) returned 1 [0140.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0140.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.SYMMYWARE", lpFilePart=0x0) returned 0xa5 [0140.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x235e890, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x46040)) returned 1 [0140.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.555] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.symmyware")) returned 1 [0140.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0140.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.557] GetFileType (hFile=0x344) returned 0x1 [0140.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.557] GetFileType (hFile=0x344) returned 0x1 [0140.557] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x7c33 [0140.557] ReadFile (in: hFile=0x344, lpBuffer=0x26cb058, nNumberOfBytesToRead=0x7c33, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x26cb058*, lpNumberOfBytesRead=0x12d938*=0x7c33, lpOverlapped=0x0) returned 1 [0140.559] CloseHandle (hObject=0x344) returned 1 [0140.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0140.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.631] GetFileType (hFile=0x344) returned 0x1 [0140.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.631] GetFileType (hFile=0x344) returned 0x1 [0140.631] WriteFile (in: hFile=0x344, lpBuffer=0x274a1a8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x274a1a8*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.632] CloseHandle (hObject=0x344) returned 1 [0140.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0140.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.635] GetFileType (hFile=0x344) returned 0x1 [0140.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.635] GetFileType (hFile=0x344) returned 0x1 [0140.635] WriteFile (in: hFile=0x344, lpBuffer=0x2740e18*, nNumberOfBytesToWrite=0x7c40, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x2740e18*, lpNumberOfBytesWritten=0x12d998*=0x7c40, lpOverlapped=0x0) returned 1 [0140.637] CloseHandle (hObject=0x344) returned 1 [0140.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0xa2 [0140.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.SYMMYWARE", lpFilePart=0x0) returned 0xac [0140.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x24244a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1 [0140.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.639] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.symmyware")) returned 1 [0140.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0140.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.640] GetFileType (hFile=0x344) returned 0x1 [0140.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.640] GetFileType (hFile=0x344) returned 0x1 [0140.640] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x2adeb [0140.641] ReadFile (in: hFile=0x344, lpBuffer=0x1296fee0, nNumberOfBytesToRead=0x2adeb, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x1296fee0*, lpNumberOfBytesRead=0x12d938*=0x2adeb, lpOverlapped=0x0) returned 1 [0140.644] CloseHandle (hObject=0x344) returned 1 [0140.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0140.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.663] GetFileType (hFile=0x344) returned 0x1 [0140.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.664] GetFileType (hFile=0x344) returned 0x1 [0140.664] WriteFile (in: hFile=0x344, lpBuffer=0x279c010*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x279c010*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.665] CloseHandle (hObject=0x344) returned 1 [0140.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0140.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.666] GetFileType (hFile=0x344) returned 0x1 [0140.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.667] GetFileType (hFile=0x344) returned 0x1 [0140.667] WriteFile (in: hFile=0x344, lpBuffer=0x1284fad8*, nNumberOfBytesToWrite=0x2adf0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x1284fad8*, lpNumberOfBytesWritten=0x12d998*=0x2adf0, lpOverlapped=0x0) returned 1 [0140.671] CloseHandle (hObject=0x344) returned 1 [0140.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x9a [0140.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.SYMMYWARE", lpFilePart=0x0) returned 0xa4 [0140.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x24774c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2adf0)) returned 1 [0140.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.symmyware")) returned 1 [0140.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0140.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.676] GetFileType (hFile=0x344) returned 0x1 [0140.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.676] GetFileType (hFile=0x344) returned 0x1 [0140.676] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x794cf [0140.678] ReadFile (in: hFile=0x344, lpBuffer=0x1287a900, nNumberOfBytesToRead=0x794cf, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x1287a900*, lpNumberOfBytesRead=0x12d938*=0x794cf, lpOverlapped=0x0) returned 1 [0140.701] CloseHandle (hObject=0x344) returned 1 [0140.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0140.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.754] GetFileType (hFile=0x344) returned 0x1 [0140.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.754] GetFileType (hFile=0x344) returned 0x1 [0140.754] WriteFile (in: hFile=0x344, lpBuffer=0x26c9818*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x26c9818*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.755] CloseHandle (hObject=0x344) returned 1 [0140.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0140.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.757] GetFileType (hFile=0x344) returned 0x1 [0140.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.757] GetFileType (hFile=0x344) returned 0x1 [0140.757] WriteFile (in: hFile=0x344, lpBuffer=0x127c4b58*, nNumberOfBytesToWrite=0x794d0, lpNumberOfBytesWritten=0x12d998, lpOverlapped=0x0 | out: lpBuffer=0x127c4b58*, lpNumberOfBytesWritten=0x12d998*=0x794d0, lpOverlapped=0x0) returned 1 [0140.771] CloseHandle (hObject=0x344) returned 1 [0140.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x9c [0140.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.SYMMYWARE", lpFilePart=0x0) returned 0xa6 [0140.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2544600, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x794d0)) returned 1 [0140.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.symmyware")) returned 1 [0140.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0140.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.780] GetFileType (hFile=0x344) returned 0x1 [0140.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.781] GetFileType (hFile=0x344) returned 0x1 [0140.781] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da08 | out: lpFileSizeHigh=0x12da08*=0x0) returned 0x941 [0140.781] ReadFile (in: hFile=0x344, lpBuffer=0x26cba18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d938, lpOverlapped=0x0 | out: lpBuffer=0x26cba18*, lpNumberOfBytesRead=0x12d938*=0x941, lpOverlapped=0x0) returned 1 [0140.783] CloseHandle (hObject=0x344) returned 1 [0140.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x12d2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0140.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7b0) returned 1 [0140.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.855] GetFileType (hFile=0x344) returned 0x1 [0140.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d720) returned 1 [0140.855] GetFileType (hFile=0x344) returned 0x1 [0140.856] WriteFile (in: hFile=0x344, lpBuffer=0x2720060*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d7f8, lpOverlapped=0x0 | out: lpBuffer=0x2720060*, lpNumberOfBytesWritten=0x12d7f8*=0x36, lpOverlapped=0x0) returned 1 [0140.857] CloseHandle (hObject=0x344) returned 1 [0140.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x12d390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0140.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d870) returned 1 [0140.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.859] GetFileType (hFile=0x344) returned 0x1 [0140.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7e0) returned 1 [0140.859] GetFileType (hFile=0x344) returned 0x1 [0140.859] WriteFile (in: hFile=0x344, lpBuffer=0x2721290*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x12d848, lpOverlapped=0x0 | out: lpBuffer=0x2721290*, lpNumberOfBytesWritten=0x12d848*=0x950, lpOverlapped=0x0) returned 1 [0140.861] CloseHandle (hObject=0x344) returned 1 [0140.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x9a [0140.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.SYMMYWARE", lpFilePart=0x0) returned 0xa4 [0140.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x12da50 | out: lpFileInformation=0x12da50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2611740, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0140.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0140.863] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.symmyware")) returned 1 [0140.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0140.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0140.866] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0140.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0140.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0140.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0140.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0140.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0140.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0140.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0140.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0140.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.873] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0140.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0140.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0140.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0140.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0140.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0140.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0140.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0140.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0140.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0140.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0140.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0140.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0140.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0140.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0140.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0 [0140.881] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0140.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0140.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0140.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0140.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0140.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.884] GetFileType (hFile=0x344) returned 0x1 [0140.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0140.884] GetFileType (hFile=0x344) returned 0x1 [0140.884] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x1a1d [0140.884] ReadFile (in: hFile=0x344, lpBuffer=0x27290d8, nNumberOfBytesToRead=0x1a1d, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x27290d8*, lpNumberOfBytesRead=0x12d8b8*=0x1a1d, lpOverlapped=0x0) returned 1 [0140.887] CloseHandle (hObject=0x344) returned 1 [0140.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0140.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0140.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.946] GetFileType (hFile=0x344) returned 0x1 [0140.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0140.946] GetFileType (hFile=0x344) returned 0x1 [0140.946] WriteFile (in: hFile=0x344, lpBuffer=0x2783360*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2783360*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0140.947] CloseHandle (hObject=0x344) returned 1 [0140.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0140.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0140.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.949] GetFileType (hFile=0x344) returned 0x1 [0140.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0140.949] GetFileType (hFile=0x344) returned 0x1 [0140.949] WriteFile (in: hFile=0x344, lpBuffer=0x2780210*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x12d918, lpOverlapped=0x0 | out: lpBuffer=0x2780210*, lpNumberOfBytesWritten=0x12d918*=0x1a20, lpOverlapped=0x0) returned 1 [0140.951] CloseHandle (hObject=0x344) returned 1 [0140.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0140.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.SYMMYWARE", lpFilePart=0x0) returned 0xa8 [0140.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0140.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x26e84c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1a20)) returned 1 [0140.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0140.956] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.symmyware")) returned 1 [0140.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0140.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0140.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.958] GetFileType (hFile=0x344) returned 0x1 [0140.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0140.958] GetFileType (hFile=0x344) returned 0x1 [0140.958] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x221da [0140.958] ReadFile (in: hFile=0x344, lpBuffer=0x1283e060, nNumberOfBytesToRead=0x221da, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x1283e060*, lpNumberOfBytesRead=0x12d8b8*=0x221da, lpOverlapped=0x0) returned 1 [0140.962] CloseHandle (hObject=0x344) returned 1 [0140.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0140.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0140.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0140.976] GetFileType (hFile=0x344) returned 0x1 [0140.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0140.977] GetFileType (hFile=0x344) returned 0x1 [0140.977] WriteFile (in: hFile=0x344, lpBuffer=0x27d5180*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x27d5180*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0140.978] CloseHandle (hObject=0x344) returned 1 [0140.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0140.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0140.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.979] GetFileType (hFile=0x344) returned 0x1 [0140.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0140.980] GetFileType (hFile=0x344) returned 0x1 [0140.980] WriteFile (in: hFile=0x344, lpBuffer=0x1297c5f0*, nNumberOfBytesToWrite=0x221e0, lpNumberOfBytesWritten=0x12d918, lpOverlapped=0x0 | out: lpBuffer=0x1297c5f0*, lpNumberOfBytesWritten=0x12d918*=0x221e0, lpOverlapped=0x0) returned 1 [0140.983] CloseHandle (hObject=0x344) returned 1 [0140.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x9d [0140.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.SYMMYWARE", lpFilePart=0x0) returned 0xa7 [0140.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0140.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x272a370, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x221e0)) returned 1 [0140.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0140.989] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.symmyware")) returned 1 [0140.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0140.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0140.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0140.991] GetFileType (hFile=0x344) returned 0x1 [0140.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0140.991] GetFileType (hFile=0x344) returned 0x1 [0140.991] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0xf2 [0140.991] ReadFile (in: hFile=0x344, lpBuffer=0x27d6b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d6b38*, lpNumberOfBytesRead=0x12d8b8*=0xf2, lpOverlapped=0x0) returned 1 [0140.992] CloseHandle (hObject=0x344) returned 1 [0140.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0140.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.001] GetFileType (hFile=0x344) returned 0x1 [0141.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.001] GetFileType (hFile=0x344) returned 0x1 [0141.001] WriteFile (in: hFile=0x344, lpBuffer=0x2828440*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2828440*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.002] CloseHandle (hObject=0x344) returned 1 [0141.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0141.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.004] GetFileType (hFile=0x344) returned 0x1 [0141.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.004] GetFileType (hFile=0x344) returned 0x1 [0141.004] WriteFile (in: hFile=0x344, lpBuffer=0x2829690*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2829690*, lpNumberOfBytesWritten=0x12d7c8*=0x100, lpOverlapped=0x0) returned 1 [0141.006] CloseHandle (hObject=0x344) returned 1 [0141.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0xa6 [0141.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.SYMMYWARE", lpFilePart=0x0) returned 0xb0 [0141.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2756290, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0141.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.symmyware")) returned 1 [0141.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0141.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.013] GetFileType (hFile=0x344) returned 0x1 [0141.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.013] GetFileType (hFile=0x344) returned 0x1 [0141.013] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x1bef [0141.013] ReadFile (in: hFile=0x344, lpBuffer=0x282ad80, nNumberOfBytesToRead=0x1bef, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x282ad80*, lpNumberOfBytesRead=0x12d8b8*=0x1bef, lpOverlapped=0x0) returned 1 [0141.015] CloseHandle (hObject=0x344) returned 1 [0141.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0141.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.026] GetFileType (hFile=0x344) returned 0x1 [0141.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.026] GetFileType (hFile=0x344) returned 0x1 [0141.026] WriteFile (in: hFile=0x344, lpBuffer=0x2885b18*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2885b18*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.028] CloseHandle (hObject=0x344) returned 1 [0141.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0141.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.031] GetFileType (hFile=0x344) returned 0x1 [0141.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.031] GetFileType (hFile=0x344) returned 0x1 [0141.031] WriteFile (in: hFile=0x344, lpBuffer=0x28827c8*, nNumberOfBytesToWrite=0x1bf0, lpNumberOfBytesWritten=0x12d918, lpOverlapped=0x0 | out: lpBuffer=0x28827c8*, lpNumberOfBytesWritten=0x12d918*=0x1bf0, lpOverlapped=0x0) returned 1 [0141.032] CloseHandle (hObject=0x344) returned 1 [0141.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0141.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.SYMMYWARE", lpFilePart=0x0) returned 0xb4 [0141.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x278e500, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1bf0)) returned 1 [0141.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.037] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.symmyware")) returned 1 [0141.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0141.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.040] GetFileType (hFile=0x344) returned 0x1 [0141.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.040] GetFileType (hFile=0x344) returned 0x1 [0141.040] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x3b [0141.040] ReadFile (in: hFile=0x344, lpBuffer=0x2887490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x2887490*, lpNumberOfBytesRead=0x12d8b8*=0x3b, lpOverlapped=0x0) returned 1 [0141.041] CloseHandle (hObject=0x344) returned 1 [0141.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0141.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.097] GetFileType (hFile=0x344) returned 0x1 [0141.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.097] GetFileType (hFile=0x344) returned 0x1 [0141.097] WriteFile (in: hFile=0x344, lpBuffer=0x26da540*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x26da540*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.098] CloseHandle (hObject=0x344) returned 1 [0141.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0141.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.100] GetFileType (hFile=0x344) returned 0x1 [0141.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.100] GetFileType (hFile=0x344) returned 0x1 [0141.100] WriteFile (in: hFile=0x344, lpBuffer=0x26db770*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x26db770*, lpNumberOfBytesWritten=0x12d7c8*=0x40, lpOverlapped=0x0) returned 1 [0141.101] CloseHandle (hObject=0x344) returned 1 [0141.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0141.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.SYMMYWARE", lpFilePart=0x0) returned 0xa8 [0141.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2831e30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0141.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.symmyware")) returned 1 [0141.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0141.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.109] GetFileType (hFile=0x344) returned 0x1 [0141.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.109] GetFileType (hFile=0x344) returned 0x1 [0141.109] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x828 [0141.109] ReadFile (in: hFile=0x344, lpBuffer=0x26dd638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dd638*, lpNumberOfBytesRead=0x12d8b8*=0x828, lpOverlapped=0x0) returned 1 [0141.111] CloseHandle (hObject=0x344) returned 1 [0141.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0141.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.121] GetFileType (hFile=0x344) returned 0x1 [0141.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.121] GetFileType (hFile=0x344) returned 0x1 [0141.121] WriteFile (in: hFile=0x344, lpBuffer=0x27316d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x27316d0*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.122] CloseHandle (hObject=0x344) returned 1 [0141.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0141.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.123] GetFileType (hFile=0x344) returned 0x1 [0141.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.124] GetFileType (hFile=0x344) returned 0x1 [0141.124] WriteFile (in: hFile=0x344, lpBuffer=0x27328f8*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x27328f8*, lpNumberOfBytesWritten=0x12d7c8*=0x830, lpOverlapped=0x0) returned 1 [0141.125] CloseHandle (hObject=0x344) returned 1 [0141.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0141.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.SYMMYWARE", lpFilePart=0x0) returned 0xa6 [0141.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2862b70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0141.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.127] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.symmyware")) returned 1 [0141.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0141.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.130] GetFileType (hFile=0x344) returned 0x1 [0141.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.130] GetFileType (hFile=0x344) returned 0x1 [0141.130] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x3b [0141.130] ReadFile (in: hFile=0x344, lpBuffer=0x2733fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x2733fc8*, lpNumberOfBytesRead=0x12d8b8*=0x3b, lpOverlapped=0x0) returned 1 [0141.131] CloseHandle (hObject=0x344) returned 1 [0141.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0141.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.144] GetFileType (hFile=0x344) returned 0x1 [0141.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.145] GetFileType (hFile=0x344) returned 0x1 [0141.145] WriteFile (in: hFile=0x344, lpBuffer=0x2785720*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2785720*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.146] CloseHandle (hObject=0x344) returned 1 [0141.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0141.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.148] GetFileType (hFile=0x344) returned 0x1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.148] GetFileType (hFile=0x344) returned 0x1 [0141.148] WriteFile (in: hFile=0x344, lpBuffer=0x2786948*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2786948*, lpNumberOfBytesWritten=0x12d7c8*=0x40, lpOverlapped=0x0) returned 1 [0141.150] CloseHandle (hObject=0x344) returned 1 [0141.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0141.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.SYMMYWARE", lpFilePart=0x0) returned 0xa7 [0141.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x28986d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0141.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.151] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.symmyware")) returned 1 [0141.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0141.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.153] GetFileType (hFile=0x344) returned 0x1 [0141.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.153] GetFileType (hFile=0x344) returned 0x1 [0141.153] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x3b [0141.153] ReadFile (in: hFile=0x344, lpBuffer=0x2788018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x2788018*, lpNumberOfBytesRead=0x12d8b8*=0x3b, lpOverlapped=0x0) returned 1 [0141.155] CloseHandle (hObject=0x344) returned 1 [0141.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0141.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.166] GetFileType (hFile=0x344) returned 0x1 [0141.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.166] GetFileType (hFile=0x344) returned 0x1 [0141.167] WriteFile (in: hFile=0x344, lpBuffer=0x27d9770*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x27d9770*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.168] CloseHandle (hObject=0x344) returned 1 [0141.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0141.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.170] GetFileType (hFile=0x344) returned 0x1 [0141.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.170] GetFileType (hFile=0x344) returned 0x1 [0141.170] WriteFile (in: hFile=0x344, lpBuffer=0x27da998*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x27da998*, lpNumberOfBytesWritten=0x12d7c8*=0x40, lpOverlapped=0x0) returned 1 [0141.171] CloseHandle (hObject=0x344) returned 1 [0141.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0141.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.SYMMYWARE", lpFilePart=0x0) returned 0xa6 [0141.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x28c6d00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0141.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.172] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.symmyware")) returned 1 [0141.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9f [0141.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0141.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.174] GetFileType (hFile=0x344) returned 0x1 [0141.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0141.175] GetFileType (hFile=0x344) returned 0x1 [0141.176] WriteFile (in: hFile=0x344, lpBuffer=0x27de190*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x27de190*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0141.178] CloseHandle (hObject=0x344) returned 1 [0141.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0141.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0141.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0141.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0141.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0141.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.181] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0141.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0141.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0141.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0141.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0141.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.182] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0141.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0141.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0 [0141.184] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0141.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0141.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0141.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.185] GetFileType (hFile=0x344) returned 0x1 [0141.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.185] GetFileType (hFile=0x344) returned 0x1 [0141.185] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x174c [0141.185] ReadFile (in: hFile=0x344, lpBuffer=0x27e3438, nNumberOfBytesToRead=0x174c, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e3438*, lpNumberOfBytesRead=0x12d8b8*=0x174c, lpOverlapped=0x0) returned 1 [0141.188] CloseHandle (hObject=0x344) returned 1 [0141.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0141.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.200] GetFileType (hFile=0x344) returned 0x1 [0141.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.200] GetFileType (hFile=0x344) returned 0x1 [0141.200] WriteFile (in: hFile=0x344, lpBuffer=0x283c5e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x283c5e8*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.201] CloseHandle (hObject=0x344) returned 1 [0141.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0141.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.203] GetFileType (hFile=0x344) returned 0x1 [0141.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.204] GetFileType (hFile=0x344) returned 0x1 [0141.204] WriteFile (in: hFile=0x344, lpBuffer=0x2839760*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x12d918, lpOverlapped=0x0 | out: lpBuffer=0x2839760*, lpNumberOfBytesWritten=0x12d918*=0x1750, lpOverlapped=0x0) returned 1 [0141.205] CloseHandle (hObject=0x344) returned 1 [0141.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0141.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.SYMMYWARE", lpFilePart=0x0) returned 0xae [0141.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x291eb40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0141.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.208] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.symmyware")) returned 1 [0141.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0141.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.211] GetFileType (hFile=0x344) returned 0x1 [0141.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.211] GetFileType (hFile=0x344) returned 0x1 [0141.211] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12d988 | out: lpFileSizeHigh=0x12d988*=0x0) returned 0x945 [0141.211] ReadFile (in: hFile=0x344, lpBuffer=0x283e808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d8b8, lpOverlapped=0x0 | out: lpBuffer=0x283e808*, lpNumberOfBytesRead=0x12d8b8*=0x945, lpOverlapped=0x0) returned 1 [0141.226] CloseHandle (hObject=0x344) returned 1 [0141.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x12d250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0141.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d730) returned 1 [0141.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.295] GetFileType (hFile=0x344) returned 0x1 [0141.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6a0) returned 1 [0141.295] GetFileType (hFile=0x344) returned 0x1 [0141.295] WriteFile (in: hFile=0x344, lpBuffer=0x2892c60*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d778, lpOverlapped=0x0 | out: lpBuffer=0x2892c60*, lpNumberOfBytesWritten=0x12d778*=0x36, lpOverlapped=0x0) returned 1 [0141.296] CloseHandle (hObject=0x344) returned 1 [0141.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x12d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0141.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7f0) returned 1 [0141.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.298] GetFileType (hFile=0x344) returned 0x1 [0141.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d760) returned 1 [0141.298] GetFileType (hFile=0x344) returned 0x1 [0141.299] WriteFile (in: hFile=0x344, lpBuffer=0x2893e88*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x12d7c8, lpOverlapped=0x0 | out: lpBuffer=0x2893e88*, lpNumberOfBytesWritten=0x12d7c8*=0x950, lpOverlapped=0x0) returned 1 [0141.300] CloseHandle (hObject=0x344) returned 1 [0141.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0xa2 [0141.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.SYMMYWARE", lpFilePart=0x0) returned 0xac [0141.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x12d9d0 | out: lpFileInformation=0x12d9d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x29fcdf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0141.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.303] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.symmyware")) returned 1 [0141.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa8 [0141.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0141.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.308] GetFileType (hFile=0x344) returned 0x1 [0141.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0141.308] GetFileType (hFile=0x344) returned 0x1 [0141.308] WriteFile (in: hFile=0x344, lpBuffer=0x28976d8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d868, lpOverlapped=0x0 | out: lpBuffer=0x28976d8*, lpNumberOfBytesWritten=0x12d868*=0x4aa, lpOverlapped=0x0) returned 1 [0141.310] CloseHandle (hObject=0x344) returned 1 [0141.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0141.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0141.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0141.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0141.315] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0141.315] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0141.315] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0141.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0141.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0141.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0141.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0141.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0141.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0141.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0141.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0141.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0141.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0141.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0141.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0141.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0141.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0141.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0141.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0141.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0141.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0141.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0141.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0141.322] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0141.322] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0141.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0141.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0141.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0141.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0141.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0141.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0141.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0141.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0141.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0141.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0141.327] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0141.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0141.328] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0141.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0141.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0141.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0141.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0141.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0141.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0141.331] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0141.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0141.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0141.332] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0141.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0141.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0141.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0141.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0141.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0141.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0141.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0141.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0141.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0141.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0141.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0141.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0141.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0141.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0141.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0141.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0141.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0141.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0141.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.347] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0141.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0141.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0141.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0141.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0141.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0141.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.354] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0141.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0141.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0141.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0141.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.360] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0141.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0141.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.364] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0141.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0141.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.365] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.365] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0141.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0141.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0141.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0141.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.370] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0141.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0141.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.380] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.381] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.381] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.381] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0141.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0141.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.382] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.383] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.383] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.384] GetFileType (hFile=0x344) returned 0x1 [0141.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.384] GetFileType (hFile=0x344) returned 0x1 [0141.385] WriteFile (in: hFile=0x344, lpBuffer=0x26d3ce8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26d3ce8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.386] CloseHandle (hObject=0x344) returned 1 [0141.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0141.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0141.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.389] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0141.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0141.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.391] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.391] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.392] GetFileType (hFile=0x344) returned 0x1 [0141.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.392] GetFileType (hFile=0x344) returned 0x1 [0141.393] WriteFile (in: hFile=0x344, lpBuffer=0x26da968*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26da968*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.394] CloseHandle (hObject=0x344) returned 1 [0141.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0141.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0141.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.395] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.396] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0141.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0141.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.399] GetFileType (hFile=0x344) returned 0x1 [0141.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.400] GetFileType (hFile=0x344) returned 0x1 [0141.400] WriteFile (in: hFile=0x344, lpBuffer=0x26e15e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26e15e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.401] CloseHandle (hObject=0x344) returned 1 [0141.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0141.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0141.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.404] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0141.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0141.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.406] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.407] GetFileType (hFile=0x344) returned 0x1 [0141.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.407] GetFileType (hFile=0x344) returned 0x1 [0141.408] WriteFile (in: hFile=0x344, lpBuffer=0x26e8268*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26e8268*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.409] CloseHandle (hObject=0x344) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0141.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0141.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.411] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0141.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0141.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.412] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.413] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.414] GetFileType (hFile=0x344) returned 0x1 [0141.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.414] GetFileType (hFile=0x344) returned 0x1 [0141.415] WriteFile (in: hFile=0x344, lpBuffer=0x26eeee8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26eeee8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.416] CloseHandle (hObject=0x344) returned 1 [0141.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0141.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0141.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.419] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.420] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.420] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.420] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0141.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0141.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.421] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.421] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.422] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.422] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.423] GetFileType (hFile=0x344) returned 0x1 [0141.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.423] GetFileType (hFile=0x344) returned 0x1 [0141.424] WriteFile (in: hFile=0x344, lpBuffer=0x26f5b68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26f5b68*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.425] CloseHandle (hObject=0x344) returned 1 [0141.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0141.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0141.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.427] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0141.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0141.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.428] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.429] GetFileType (hFile=0x344) returned 0x1 [0141.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.430] GetFileType (hFile=0x344) returned 0x1 [0141.430] WriteFile (in: hFile=0x344, lpBuffer=0x26fc7e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x26fc7e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.432] CloseHandle (hObject=0x344) returned 1 [0141.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0141.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0141.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.434] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.434] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.435] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.435] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0141.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0141.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.436] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.436] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.437] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.438] GetFileType (hFile=0x344) returned 0x1 [0141.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.438] GetFileType (hFile=0x344) returned 0x1 [0141.439] WriteFile (in: hFile=0x344, lpBuffer=0x2703468*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2703468*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.440] CloseHandle (hObject=0x344) returned 1 [0141.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0141.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0141.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.442] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0141.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0141.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.444] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.445] GetFileType (hFile=0x344) returned 0x1 [0141.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.445] GetFileType (hFile=0x344) returned 0x1 [0141.446] WriteFile (in: hFile=0x344, lpBuffer=0x270a0e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x270a0e8*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.447] CloseHandle (hObject=0x344) returned 1 [0141.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0141.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0141.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.451] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0141.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0141.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.452] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.454] GetFileType (hFile=0x344) returned 0x1 [0141.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.454] GetFileType (hFile=0x344) returned 0x1 [0141.454] WriteFile (in: hFile=0x344, lpBuffer=0x2710d68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2710d68*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.456] CloseHandle (hObject=0x344) returned 1 [0141.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0141.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0141.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.458] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0141.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0141.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.460] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa1 [0141.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.461] WriteFile (in: hFile=0x344, lpBuffer=0x2717a08*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2717a08*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0141.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0141.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.465] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0141.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0141.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.466] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.468] WriteFile (in: hFile=0x344, lpBuffer=0x271e688*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x271e688*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0141.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0141.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0141.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0141.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.510] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.512] WriteFile (in: hFile=0x344, lpBuffer=0x2725308*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d7e8, lpOverlapped=0x0 | out: lpBuffer=0x2725308*, lpNumberOfBytesWritten=0x12d7e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0141.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0141.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.517] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0141.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0141.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.518] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0141.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0141.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.523] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0141.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0141.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.524] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0141.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0141.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.529] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0141.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0141.529] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.530] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.530] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.530] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.530] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0141.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0141.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.533] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.533] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.533] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.533] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0141.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0141.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.534] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.534] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.535] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.535] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0141.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0141.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.539] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0141.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0141.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.540] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0141.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0141.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.561] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.561] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.561] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.561] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0141.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0141.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.562] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.562] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.562] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.562] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0141.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0141.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.568] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0141.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0141.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.569] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0141.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0141.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.573] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0141.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0141.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.575] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.575] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.575] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.575] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0141.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0141.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.578] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.579] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.579] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.579] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0141.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0141.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.581] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.581] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.581] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.581] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0141.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0141.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.584] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.584] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.584] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.584] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0141.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0141.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.585] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0141.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0141.588] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.590] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0141.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0141.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.591] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0141.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0141.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.594] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0141.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0141.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.595] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.595] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0141.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0141.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.600] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0141.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0141.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.601] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0141.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0141.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.604] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0141.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0141.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.605] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0141.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0141.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.610] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0141.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0141.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.611] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0141.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0141.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.614] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0141.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0141.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.616] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0141.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0141.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.620] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0141.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0141.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.621] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0141.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0141.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.624] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0141.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0141.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.625] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.625] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d800) returned 1 [0141.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d740) returned 1 [0141.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d6b0) returned 1 [0141.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0141.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0141.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.635] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.635] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.635] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.635] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d840) returned 1 [0141.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0141.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0141.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.636] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.636] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.636] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.637] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa3 [0141.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0141.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0141.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.640] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.640] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0141.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0141.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.641] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.642] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa3 [0141.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0141.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0141.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.645] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.646] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.646] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.646] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0141.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0141.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.647] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.647] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0141.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0141.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.650] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0141.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0141.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.651] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0141.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0141.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.656] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.656] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0141.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0141.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.657] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.657] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0141.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0141.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.660] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0141.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0141.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.661] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.661] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0141.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0141.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.665] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.665] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.666] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.666] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0141.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x12d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0141.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.667] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.667] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0xa0 [0141.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.670] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.671] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.675] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.676] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.679] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.679] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.680] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0141.680] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0141.701] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d5e0 | out: lpFindFileData=0x12d5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.701] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.703] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.705] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.706] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.710] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.710] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.713] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.713] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.717] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.717] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.720] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.720] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.723] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x12d590 | out: lpFindFileData=0x12d590*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.724] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.728] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.728] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.739] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.740] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.742] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.742] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.744] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.745] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.748] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.749] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.750] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.759] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.762] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.768] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.769] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.772] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.774] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.780] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.780] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.782] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.782] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.783] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da88 | out: lpFileSizeHigh=0x12da88*=0x0) returned 0x28df6 [0141.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x12d350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x92 [0141.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d830) returned 1 [0141.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.929] GetFileType (hFile=0x344) returned 0x1 [0141.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7a0) returned 1 [0141.930] GetFileType (hFile=0x344) returned 0x1 [0141.930] WriteFile (in: hFile=0x344, lpBuffer=0x26d0058*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d878, lpOverlapped=0x0 | out: lpBuffer=0x26d0058*, lpNumberOfBytesWritten=0x12d878*=0x36, lpOverlapped=0x0) returned 1 [0141.931] CloseHandle (hObject=0x344) returned 1 [0141.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x12d410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x92 [0141.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0141.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0141.933] GetFileType (hFile=0x344) returned 0x1 [0141.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d860) returned 1 [0141.933] GetFileType (hFile=0x344) returned 0x1 [0141.933] WriteFile (in: hFile=0x344, lpBuffer=0x129c7638*, nNumberOfBytesToWrite=0x28e00, lpNumberOfBytesWritten=0x12da18, lpOverlapped=0x0 | out: lpBuffer=0x129c7638*, lpNumberOfBytesWritten=0x12da18*=0x28e00, lpOverlapped=0x0) returned 1 [0141.938] CloseHandle (hObject=0x344) returned 1 [0141.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x92 [0141.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.SYMMYWARE", lpFilePart=0x0) returned 0x9c [0141.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0141.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x12dad0 | out: lpFileInformation=0x12dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2fb5b70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x28e00)) returned 1 [0141.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0141.944] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.symmyware")) returned 1 [0141.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x90 [0141.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0141.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.948] GetFileType (hFile=0x344) returned 0x1 [0141.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0141.948] GetFileType (hFile=0x344) returned 0x1 [0141.949] WriteFile (in: hFile=0x344, lpBuffer=0x26d3a10*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d968, lpOverlapped=0x0 | out: lpBuffer=0x26d3a10*, lpNumberOfBytesWritten=0x12d968*=0x4aa, lpOverlapped=0x0) returned 1 [0141.951] CloseHandle (hObject=0x344) returned 1 [0141.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0141.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0141.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.954] GetFileType (hFile=0x344) returned 0x1 [0141.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0141.954] GetFileType (hFile=0x344) returned 0x1 [0141.955] WriteFile (in: hFile=0x344, lpBuffer=0x26d6d68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x26d6d68*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0141.956] CloseHandle (hObject=0x344) returned 1 [0141.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0141.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0141.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.958] GetFileType (hFile=0x344) returned 0x1 [0141.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0141.958] GetFileType (hFile=0x344) returned 0x1 [0141.959] WriteFile (in: hFile=0x344, lpBuffer=0x26da080*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26da080*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0141.960] CloseHandle (hObject=0x344) returned 1 [0141.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0141.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x50 [0141.961] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.963] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.963] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x4f [0141.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x50 [0141.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.964] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0141.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0141.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.975] GetFileType (hFile=0x344) returned 0x1 [0141.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0141.976] GetFileType (hFile=0x344) returned 0x1 [0141.976] WriteFile (in: hFile=0x344, lpBuffer=0x26df6a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26df6a8*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0141.978] CloseHandle (hObject=0x344) returned 1 [0141.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0141.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x55 [0141.979] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.979] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.979] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.980] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x54 [0141.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x55 [0141.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.981] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.981] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0141.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0141.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.982] GetFileType (hFile=0x344) returned 0x1 [0141.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0141.982] GetFileType (hFile=0x344) returned 0x1 [0141.983] WriteFile (in: hFile=0x344, lpBuffer=0x26e4dd0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26e4dd0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0141.984] CloseHandle (hObject=0x344) returned 1 [0141.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0141.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x51 [0141.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.985] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.986] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x50 [0141.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x51 [0141.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.987] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.987] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.987] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5e [0141.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0141.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.988] GetFileType (hFile=0x344) returned 0x1 [0141.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0141.988] GetFileType (hFile=0x344) returned 0x1 [0141.989] WriteFile (in: hFile=0x344, lpBuffer=0x26ea418*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26ea418*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0141.990] CloseHandle (hObject=0x344) returned 1 [0141.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0141.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x50 [0141.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.992] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.992] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x4f [0141.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x50 [0141.994] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0141.994] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.994] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.995] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0141.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0141.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0141.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0141.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0141.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0141.996] GetFileType (hFile=0x344) returned 0x1 [0141.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0141.996] GetFileType (hFile=0x344) returned 0x1 [0141.997] WriteFile (in: hFile=0x344, lpBuffer=0x26efa40*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26efa40*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0141.998] CloseHandle (hObject=0x344) returned 1 [0141.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0141.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0141.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x4a [0142.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.004] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.004] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.004] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x49 [0142.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x4a [0142.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.006] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.006] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.006] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0142.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.009] GetFileType (hFile=0x344) returned 0x1 [0142.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.009] GetFileType (hFile=0x344) returned 0x1 [0142.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0142.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x56 [0142.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.013] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x55 [0142.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x56 [0142.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.014] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0142.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.015] GetFileType (hFile=0x344) returned 0x1 [0142.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.015] GetFileType (hFile=0x344) returned 0x1 [0142.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0142.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x4f [0142.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.017] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.017] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.017] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x4e [0142.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x4f [0142.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.018] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.018] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.018] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5c [0142.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.019] GetFileType (hFile=0x344) returned 0x1 [0142.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.019] GetFileType (hFile=0x344) returned 0x1 [0142.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0142.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x50 [0142.021] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.021] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.021] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.021] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x4f [0142.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x50 [0142.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.022] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0142.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.023] GetFileType (hFile=0x344) returned 0x1 [0142.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.023] GetFileType (hFile=0x344) returned 0x1 [0142.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0142.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.025] GetFileType (hFile=0x344) returned 0x1 [0142.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.025] GetFileType (hFile=0x344) returned 0x1 [0142.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x47 [0142.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.026] GetFileType (hFile=0x344) returned 0x1 [0142.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.027] GetFileType (hFile=0x344) returned 0x1 [0142.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0142.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x40 [0142.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.029] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x3f [0142.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x40 [0142.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.030] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0142.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.031] GetFileType (hFile=0x344) returned 0x1 [0142.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.031] GetFileType (hFile=0x344) returned 0x1 [0142.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x40 [0142.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0142.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.033] GetFileType (hFile=0x344) returned 0x1 [0142.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0142.033] GetFileType (hFile=0x344) returned 0x1 [0142.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History", lpFilePart=0x0) returned 0x33 [0142.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x34 [0142.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0142.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0142.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0142.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0142.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.039] GetFileType (hFile=0x344) returned 0x1 [0142.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0142.039] GetFileType (hFile=0x344) returned 0x1 [0142.039] WriteFile (in: hFile=0x344, lpBuffer=0x26f5458*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26f5458*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.041] CloseHandle (hObject=0x344) returned 1 [0142.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x35 [0142.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0142.041] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0142.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0142.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0142.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0142.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0142.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0142.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0142.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0142.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0142.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0142.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0142.048] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0142.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0142.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x35 [0142.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0142.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0142.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0142.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0142.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0142.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0142.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0142.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0142.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0142.051] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0142.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0142.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0142.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0142.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0142.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0142.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0142.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0142.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0142.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0142.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0142.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.054] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0142.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0142.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0142.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0142.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.055] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0142.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0142.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.057] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0142.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.059] GetFileType (hFile=0x344) returned 0x1 [0142.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.059] GetFileType (hFile=0x344) returned 0x1 [0142.059] WriteFile (in: hFile=0x344, lpBuffer=0x2701028*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2701028*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.061] CloseHandle (hObject=0x344) returned 1 [0142.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0142.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0142.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.063] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.063] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0142.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0142.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.065] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0142.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.066] GetFileType (hFile=0x344) returned 0x1 [0142.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.066] GetFileType (hFile=0x344) returned 0x1 [0142.066] WriteFile (in: hFile=0x344, lpBuffer=0x2706390*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2706390*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.068] CloseHandle (hObject=0x344) returned 1 [0142.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0142.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0142.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0142.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0142.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0142.073] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0142.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0142.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0142.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0142.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0142.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.077] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.078] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0142.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0142.080] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0142.081] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.082] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0142.083] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0142.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0142.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0142.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.097] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0142.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0142.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0142.100] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.101] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0142.102] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.106] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0142.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0142.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0142.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0142.108] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0142.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5a [0142.110] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.111] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0142.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.114] GetFileType (hFile=0x344) returned 0x1 [0142.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.114] GetFileType (hFile=0x344) returned 0x1 [0142.115] WriteFile (in: hFile=0x344, lpBuffer=0x270faf0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x270faf0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.116] CloseHandle (hObject=0x344) returned 1 [0142.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.117] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0142.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0142.118] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0142.119] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.120] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0142.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0142.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0142.125] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.125] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0142.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0142.126] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0142.127] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.128] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0142.129] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0142.132] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.133] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.133] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.134] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0142.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0142.136] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0142.137] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.137] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.138] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.139] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0142.140] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0142.143] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0142.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.144] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.144] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.145] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0142.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0142.146] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0142.147] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.147] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.148] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.149] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0142.150] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.153] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0142.154] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0142.154] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.155] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.156] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0142.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7c [0142.157] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.157] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d440, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0142.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.161] GetFileType (hFile=0x344) returned 0x1 [0142.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.161] GetFileType (hFile=0x344) returned 0x1 [0142.161] WriteFile (in: hFile=0x344, lpBuffer=0x27199f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27199f8*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.163] CloseHandle (hObject=0x344) returned 1 [0142.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0142.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x71 [0142.164] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0142.164] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0142.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.166] GetFileType (hFile=0x344) returned 0x1 [0142.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.167] WriteFile (in: hFile=0x344, lpBuffer=0x271cd70*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x271cd70*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0142.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.172] WriteFile (in: hFile=0x344, lpBuffer=0x2720048*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2720048*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0142.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0142.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.178] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.178] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0142.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0142.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0142.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0142.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0142.181] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0142.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0142.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.184] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0142.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0142.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0142.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0142.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.187] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0142.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0142.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.190] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.191] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.191] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0142.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0142.192] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.193] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.194] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0142.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.195] WriteFile (in: hFile=0x344, lpBuffer=0x2729620*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2729620*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0142.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0142.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.200] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0142.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0142.201] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.202] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0142.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.205] WriteFile (in: hFile=0x344, lpBuffer=0x272f478*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x272f478*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0142.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0142.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.209] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0142.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0142.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0142.211] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0142.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.214] WriteFile (in: hFile=0x344, lpBuffer=0x27352d0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x27352d0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0142.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0142.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0142.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.217] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0142.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0142.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0142.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0142.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0142.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0 [0142.220] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0142.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.224] WriteFile (in: hFile=0x344, lpBuffer=0x273b6a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x273b6a8*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0142.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.227] WriteFile (in: hFile=0x344, lpBuffer=0x273e990*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x273e990*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0142.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0142.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0142.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.230] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0142.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0142.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0142.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0142.232] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0142.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.234] WriteFile (in: hFile=0x344, lpBuffer=0x2743f88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2743f88*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0142.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0142.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.239] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0142.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0142.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.241] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0142.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.243] WriteFile (in: hFile=0x344, lpBuffer=0x2749150*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2749150*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0142.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0142.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.247] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0142.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0142.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.248] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0142.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.250] WriteFile (in: hFile=0x344, lpBuffer=0x274e338*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x274e338*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0142.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0142.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.254] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0142.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0142.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.256] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.256] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0142.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0142.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0142.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.260] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0142.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0142.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.261] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0142.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0142.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0142.264] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0142.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0142.498] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0142.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0142.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0142.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0142.503] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.543] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0142.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0142.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0142.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0142.549] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x2fb0 [0142.549] ReadFile (in: hFile=0x344, lpBuffer=0x275d470, nNumberOfBytesToRead=0x2fb0, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x275d470*, lpNumberOfBytesRead=0x12dbb8*=0x2fb0, lpOverlapped=0x0) returned 1 [0142.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0142.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0142.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.590] GetFileType (hFile=0x344) returned 0x1 [0142.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0142.590] GetFileType (hFile=0x344) returned 0x1 [0142.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0142.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0142.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0142.592] GetFileType (hFile=0x344) returned 0x1 [0142.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0142.592] GetFileType (hFile=0x344) returned 0x1 [0142.593] WriteFile (in: hFile=0x344, lpBuffer=0x27bb3a8*, nNumberOfBytesToWrite=0x2fc0, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x27bb3a8*, lpNumberOfBytesWritten=0x12dc18*=0x2fc0, lpOverlapped=0x0) returned 1 [0142.594] CloseHandle (hObject=0x344) returned 1 [0142.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0142.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE", lpFilePart=0x0) returned 0x5d [0142.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x35a4450, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2fc0)) returned 1 [0142.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0142.606] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.symmyware")) returned 1 [0142.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0142.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0142.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0142.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0142.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0142.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0142.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0 [0142.609] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0142.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0142.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0142.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0142.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0142.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0142.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0142.611] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.612] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0142.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0142.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.613] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.613] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0142.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0142.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.614] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x67 [0142.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.615] GetFileType (hFile=0x344) returned 0x1 [0142.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.615] GetFileType (hFile=0x344) returned 0x1 [0142.616] WriteFile (in: hFile=0x344, lpBuffer=0x27c8f10*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27c8f10*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.617] CloseHandle (hObject=0x344) returned 1 [0142.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0142.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0142.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0142.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.619] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0142.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0142.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0142.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0 [0142.621] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0142.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0142.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0142.622] GetFileType (hFile=0x344) returned 0x1 [0142.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0142.622] GetFileType (hFile=0x344) returned 0x1 [0142.622] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xd [0142.622] ReadFile (in: hFile=0x344, lpBuffer=0x27ccc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x27ccc30*, lpNumberOfBytesRead=0x12dab8*=0xd, lpOverlapped=0x0) returned 1 [0142.624] CloseHandle (hObject=0x344) returned 1 [0142.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0142.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0142.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.638] GetFileType (hFile=0x344) returned 0x1 [0142.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0142.638] GetFileType (hFile=0x344) returned 0x1 [0142.638] WriteFile (in: hFile=0x344, lpBuffer=0x281e2b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x281e2b8*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0142.640] CloseHandle (hObject=0x344) returned 1 [0142.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0142.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0142.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0142.642] GetFileType (hFile=0x344) returned 0x1 [0142.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0142.642] GetFileType (hFile=0x344) returned 0x1 [0142.642] WriteFile (in: hFile=0x344, lpBuffer=0x281f488*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x281f488*, lpNumberOfBytesWritten=0x12d9c8*=0x10, lpOverlapped=0x0) returned 1 [0142.643] CloseHandle (hObject=0x344) returned 1 [0142.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0142.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.SYMMYWARE", lpFilePart=0x0) returned 0x74 [0142.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0142.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x3605ed0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0142.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0142.645] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.symmyware")) returned 1 [0142.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x67 [0142.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.647] GetFileType (hFile=0x344) returned 0x1 [0142.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.647] GetFileType (hFile=0x344) returned 0x1 [0142.648] WriteFile (in: hFile=0x344, lpBuffer=0x2822a78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2822a78*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.649] CloseHandle (hObject=0x344) returned 1 [0142.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0142.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0142.650] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.651] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0142.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0142.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.653] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x67 [0142.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.654] GetFileType (hFile=0x344) returned 0x1 [0142.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.654] GetFileType (hFile=0x344) returned 0x1 [0142.655] WriteFile (in: hFile=0x344, lpBuffer=0x28282a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x28282a0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.657] CloseHandle (hObject=0x344) returned 1 [0142.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0142.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0142.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.658] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.658] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.658] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0142.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0142.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.659] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.660] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.660] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x67 [0142.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.661] GetFileType (hFile=0x344) returned 0x1 [0142.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.661] GetFileType (hFile=0x344) returned 0x1 [0142.662] WriteFile (in: hFile=0x344, lpBuffer=0x282dac8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x282dac8*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.663] CloseHandle (hObject=0x344) returned 1 [0142.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5e [0142.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.666] GetFileType (hFile=0x344) returned 0x1 [0142.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.666] GetFileType (hFile=0x344) returned 0x1 [0142.667] WriteFile (in: hFile=0x344, lpBuffer=0x2830df0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2830df0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.668] CloseHandle (hObject=0x344) returned 1 [0142.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0142.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0142.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.669] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0142.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0142.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0142.670] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0142.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0142.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0142.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0142.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.672] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0142.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0142.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.674] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0142.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0142.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.676] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0142.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.677] GetFileType (hFile=0x344) returned 0x1 [0142.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.677] GetFileType (hFile=0x344) returned 0x1 [0142.678] WriteFile (in: hFile=0x344, lpBuffer=0x2839230*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2839230*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.679] CloseHandle (hObject=0x344) returned 1 [0142.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0142.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0142.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0142.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0142.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0142.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0142.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.707] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0142.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0142.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0142.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0142.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0142.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0142.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0 [0142.714] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0142.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0142.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.717] GetFileType (hFile=0x344) returned 0x1 [0142.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0142.717] GetFileType (hFile=0x344) returned 0x1 [0142.718] WriteFile (in: hFile=0x344, lpBuffer=0x2840838*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2840838*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.720] CloseHandle (hObject=0x344) returned 1 [0142.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5e [0142.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.721] GetFileType (hFile=0x344) returned 0x1 [0142.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.721] GetFileType (hFile=0x344) returned 0x1 [0142.722] WriteFile (in: hFile=0x344, lpBuffer=0x2843b60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2843b60*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.724] CloseHandle (hObject=0x344) returned 1 [0142.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0142.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.725] GetFileType (hFile=0x344) returned 0x1 [0142.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.725] GetFileType (hFile=0x344) returned 0x1 [0142.726] WriteFile (in: hFile=0x344, lpBuffer=0x2846e68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2846e68*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.728] CloseHandle (hObject=0x344) returned 1 [0142.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0142.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0142.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0142.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0142.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0142.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0142.733] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0142.733] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0142.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0142.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.736] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.738] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0142.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0142.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0142.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0142.741] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0142.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0142.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0142.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.744] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0142.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0142.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.746] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0142.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0142.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.747] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0142.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0142.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0142.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0142.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0142.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.754] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0142.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0142.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0142.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0142.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0142.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.760] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0142.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0142.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0142.763] WriteFile (in: hFile=0x344, lpBuffer=0x2859f98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2859f98*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0142.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0142.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.770] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0142.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0142.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.776] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0142.784] WriteFile (in: hFile=0x344, lpBuffer=0x2864740*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2864740*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0142.787] WriteFile (in: hFile=0x344, lpBuffer=0x2867a88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2867a88*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0142.790] WriteFile (in: hFile=0x344, lpBuffer=0x286adb0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x286adb0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0142.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0142.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.793] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0142.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0142.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.795] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x67 [0142.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0142.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0142.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0142.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.800] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0142.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0142.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.801] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0142.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0142.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.803] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0142.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0142.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.804] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0142.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0142.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.806] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0142.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0142.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.807] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0142.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0142.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0142.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0142.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.812] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0142.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0142.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.813] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0142.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0142.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.813] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0142.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0142.814] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.814] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0142.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0142.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0142.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.816] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0142.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0142.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.817] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x56 [0142.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0142.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0142.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0142.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.821] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0142.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0142.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.822] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0142.824] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x7ef [0142.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0142.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0142.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.903] GetFileType (hFile=0x344) returned 0x1 [0142.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0142.903] GetFileType (hFile=0x344) returned 0x1 [0142.904] WriteFile (in: hFile=0x344, lpBuffer=0x26eaba8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x26eaba8*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0142.905] CloseHandle (hObject=0x344) returned 1 [0142.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0142.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0142.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0142.907] GetFileType (hFile=0x344) returned 0x1 [0142.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0142.907] GetFileType (hFile=0x344) returned 0x1 [0142.908] WriteFile (in: hFile=0x344, lpBuffer=0x26ebda8*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x26ebda8*, lpNumberOfBytesWritten=0x12da48*=0x7f0, lpOverlapped=0x0) returned 1 [0142.909] CloseHandle (hObject=0x344) returned 1 [0142.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0142.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.SYMMYWARE", lpFilePart=0x0) returned 0x76 [0142.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0142.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x38488a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0142.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0142.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.symmyware")) returned 1 [0142.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0142.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.916] GetFileType (hFile=0x344) returned 0x1 [0142.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.916] GetFileType (hFile=0x344) returned 0x1 [0142.918] WriteFile (in: hFile=0x344, lpBuffer=0x26ef360*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x26ef360*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.919] CloseHandle (hObject=0x344) returned 1 [0142.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0142.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.920] GetFileType (hFile=0x344) returned 0x1 [0142.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.921] GetFileType (hFile=0x344) returned 0x1 [0142.922] WriteFile (in: hFile=0x344, lpBuffer=0x26f2638*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26f2638*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.923] CloseHandle (hObject=0x344) returned 1 [0142.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0142.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0142.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0142.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1 [0142.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0142.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 1 [0142.930] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.930] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0142.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0142.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.934] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.934] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0142.935] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1 [0142.935] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 0 [0142.936] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0142.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0142.938] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.940] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.940] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0142.941] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.941] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0142.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0142.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0142.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.942] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.942] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0142.943] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0142.943] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0142.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0142.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0142.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0142.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.944] GetFileType (hFile=0x344) returned 0x1 [0142.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0142.944] GetFileType (hFile=0x344) returned 0x1 [0142.946] WriteFile (in: hFile=0x344, lpBuffer=0x26fb3f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x26fb3f8*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0142.947] CloseHandle (hObject=0x344) returned 1 [0142.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0142.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.948] GetFileType (hFile=0x344) returned 0x1 [0142.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.949] GetFileType (hFile=0x344) returned 0x1 [0142.950] WriteFile (in: hFile=0x344, lpBuffer=0x26fe6d0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26fe6d0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0142.951] CloseHandle (hObject=0x344) returned 1 [0142.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0142.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0142.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.955] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.956] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.956] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0142.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0142.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.957] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.958] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.958] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0142.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.959] GetFileType (hFile=0x344) returned 0x1 [0142.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.959] GetFileType (hFile=0x344) returned 0x1 [0142.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0142.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0142.961] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.962] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.962] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.962] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0142.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0142.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.964] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.964] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0142.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.966] GetFileType (hFile=0x344) returned 0x1 [0142.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.966] GetFileType (hFile=0x344) returned 0x1 [0142.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0142.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0142.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.969] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.970] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1 [0142.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1 [0142.971] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.971] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0142.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0142.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0142.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.973] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.974] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1 [0142.974] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1 [0142.975] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 0 [0142.975] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0142.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0142.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0142.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0142.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.977] GetFileType (hFile=0x344) returned 0x1 [0142.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0142.977] GetFileType (hFile=0x344) returned 0x1 [0142.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0142.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0142.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.982] GetFileType (hFile=0x344) returned 0x1 [0142.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0142.982] GetFileType (hFile=0x344) returned 0x1 [0142.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0142.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0142.984] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.986] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.987] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0142.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0142.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0142.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0142.988] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.989] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.989] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.990] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0142.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0142.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0142.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0142.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0142.992] GetFileType (hFile=0x344) returned 0x1 [0142.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0142.992] GetFileType (hFile=0x344) returned 0x1 [0142.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0142.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0142.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.996] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0142.997] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0142.997] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0142.998] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0142.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0142.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0142.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0142.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0142.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0142.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0142.999] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.000] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0143.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0143.001] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.001] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0143.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0143.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0143.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0143.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.004] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0143.006] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0143.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0143.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0143.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0143.007] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.007] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0143.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.008] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0143.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0143.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0143.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0143.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0143.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.010] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0143.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0143.011] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0143.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0143.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0143.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0143.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0143.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0143.014] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.014] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0143.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0143.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0143.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0143.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.019] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.019] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0143.019] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0143.019] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0143.020] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0143.020] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0143.021] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0143.021] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.021] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0143.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0143.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0143.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0143.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0143.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0143.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0143.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0143.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0143.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0143.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0 [0143.026] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0143.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0143.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0143.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0143.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0143.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0143.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0143.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0143.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0143.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0143.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0143.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0143.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0143.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0143.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0143.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0143.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0143.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0143.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0143.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0143.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0143.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0143.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0143.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0143.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0143.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.040] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0143.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0143.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0143.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0143.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0143.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0143.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0143.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0143.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0143.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0143.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0143.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0143.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0143.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0143.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0143.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0143.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0143.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0143.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0 [0143.047] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0143.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0143.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0143.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0143.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0143.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0143.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0 [0143.052] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0143.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0143.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0143.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0143.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.054] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0143.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0143.055] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0143.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.057] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0143.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0143.058] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0143.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0 [0143.058] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0143.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0143.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0143.064] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.064] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0143.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0143.065] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0143.065] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0 [0143.066] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0143.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0143.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0143.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0143.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0143.071] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0 [0143.071] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0143.072] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0143.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.072] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0143.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0143.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0143.073] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.073] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0143.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0143.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.075] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.075] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0143.075] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.075] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0143.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0143.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0143.076] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0 [0143.077] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0143.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0143.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0143.081] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.082] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0143.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0143.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0143.083] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0 [0143.083] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0143.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0143.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0143.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.087] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0143.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0143.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0143.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0 [0143.088] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0143.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0143.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.094] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.094] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.095] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0143.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0143.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.096] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0143.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0143.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0143.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0 [0143.100] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0143.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0143.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0143.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.101] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0143.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0143.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0143.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.104] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0143.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0143.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0143.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0 [0143.105] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0143.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0143.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.111] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0143.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0143.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.111] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.112] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0143.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0143.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.117] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0143.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0143.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.119] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0143.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0143.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.122] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.122] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0143.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0143.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.123] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0143.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0143.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.128] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0143.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0143.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.129] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0143.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0143.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.133] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.133] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.133] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0143.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0143.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.134] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.134] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.135] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0143.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0143.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0143.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0143.139] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0 [0143.139] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0143.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0143.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.140] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.140] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0143.141] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0143.141] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0143.141] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0143.141] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.141] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0143.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0143.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0143.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0143.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.142] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.142] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0143.142] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.143] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0143.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0143.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0143.144] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0 [0143.144] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0143.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0143.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.148] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0143.149] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.149] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0143.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0143.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0143.150] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0 [0143.150] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0143.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0143.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.155] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.156] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0143.156] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.156] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0143.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0143.157] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.157] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.157] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0143.157] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0 [0143.157] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0143.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0143.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0143.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.163] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0143.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0143.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0143.164] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0143.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 0 [0143.165] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0143.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0143.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0143.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0143.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0143.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0143.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0143.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.170] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0143.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0143.171] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.171] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.171] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.172] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0143.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0143.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.175] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.176] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0143.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0143.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0143.177] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0143.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0143.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1 [0143.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 0 [0143.180] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0143.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0143.180] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.181] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0143.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0143.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.182] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0143.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0143.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.182] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0143.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0143.185] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.187] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0143.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0143.188] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.188] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0143.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0143.188] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.192] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0143.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0143.192] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.193] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0143.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0143.196] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.197] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0143.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0143.197] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.198] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0143.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0143.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0143.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0143.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.199] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0143.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0143.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.203] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0143.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0143.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0143.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0143.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.205] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0143.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0143.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.206] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0143.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0143.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.209] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0143.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0143.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.209] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0143.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0143.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0143.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0143.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.220] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0143.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0143.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.221] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x70 [0143.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0143.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0143.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.227] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0143.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0143.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.230] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x70 [0143.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0143.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0143.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.236] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0143.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0143.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.237] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x70 [0143.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0143.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0143.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0143.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0143.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.246] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0143.250] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x40b0 [0143.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0143.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0143.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0143.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0143.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x3c84860, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0143.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0143.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.symmyware")) returned 1 [0143.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0143.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0143.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.369] GetFileType (hFile=0x344) returned 0x1 [0143.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0143.369] GetFileType (hFile=0x344) returned 0x1 [0143.370] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x40b0 [0143.370] ReadFile (in: hFile=0x344, lpBuffer=0x2866128, nNumberOfBytesToRead=0x40b0, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x2866128*, lpNumberOfBytesRead=0x12da38*=0x40b0, lpOverlapped=0x0) returned 1 [0143.372] CloseHandle (hObject=0x344) returned 1 [0143.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0143.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0143.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.385] GetFileType (hFile=0x344) returned 0x1 [0143.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0143.385] GetFileType (hFile=0x344) returned 0x1 [0143.402] WriteFile (in: hFile=0x344, lpBuffer=0x26d3fe8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x26d3fe8*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0143.403] CloseHandle (hObject=0x344) returned 1 [0143.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0143.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0143.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.405] GetFileType (hFile=0x344) returned 0x1 [0143.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0143.405] GetFileType (hFile=0x344) returned 0x1 [0143.405] WriteFile (in: hFile=0x344, lpBuffer=0x26ce958*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x26ce958*, lpNumberOfBytesWritten=0x12da98*=0x40c0, lpOverlapped=0x0) returned 1 [0143.407] CloseHandle (hObject=0x344) returned 1 [0143.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0143.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0143.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x3ce62e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0143.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0143.409] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.symmyware")) returned 1 [0143.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0143.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0143.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.414] GetFileType (hFile=0x344) returned 0x1 [0143.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0143.414] GetFileType (hFile=0x344) returned 0x1 [0143.414] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x1c362 [0143.415] ReadFile (in: hFile=0x344, lpBuffer=0x129f0470, nNumberOfBytesToRead=0x1c362, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x129f0470*, lpNumberOfBytesRead=0x12da38*=0x1c362, lpOverlapped=0x0) returned 1 [0143.418] CloseHandle (hObject=0x344) returned 1 [0143.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0143.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0143.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.528] GetFileType (hFile=0x344) returned 0x1 [0143.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0143.528] GetFileType (hFile=0x344) returned 0x1 [0143.529] WriteFile (in: hFile=0x344, lpBuffer=0x2725f70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x2725f70*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0143.531] CloseHandle (hObject=0x344) returned 1 [0143.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0143.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0143.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.534] GetFileType (hFile=0x344) returned 0x1 [0143.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0143.534] GetFileType (hFile=0x344) returned 0x1 [0143.534] WriteFile (in: hFile=0x344, lpBuffer=0x12742fc8*, nNumberOfBytesToWrite=0x1c370, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x12742fc8*, lpNumberOfBytesWritten=0x12da98*=0x1c370, lpOverlapped=0x0) returned 1 [0143.538] CloseHandle (hObject=0x344) returned 1 [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0143.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.SYMMYWARE", lpFilePart=0x0) returned 0x8f [0143.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3e1c3d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1c370)) returned 1 [0143.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0143.541] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.symmyware")) returned 1 [0143.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0143.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0143.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.543] GetFileType (hFile=0x344) returned 0x1 [0143.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0143.544] GetFileType (hFile=0x344) returned 0x1 [0143.545] WriteFile (in: hFile=0x344, lpBuffer=0x2729830*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2729830*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0143.546] CloseHandle (hObject=0x344) returned 1 [0143.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0143.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0143.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.548] GetFileType (hFile=0x344) returned 0x1 [0143.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0143.548] GetFileType (hFile=0x344) returned 0x1 [0143.549] WriteFile (in: hFile=0x344, lpBuffer=0x272cb68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x272cb68*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0143.550] CloseHandle (hObject=0x344) returned 1 [0143.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0143.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0143.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.552] GetFileType (hFile=0x344) returned 0x1 [0143.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0143.552] GetFileType (hFile=0x344) returned 0x1 [0143.553] WriteFile (in: hFile=0x344, lpBuffer=0x272fe60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x272fe60*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0143.555] CloseHandle (hObject=0x344) returned 1 [0143.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0143.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0143.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.556] GetFileType (hFile=0x344) returned 0x1 [0143.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0143.556] GetFileType (hFile=0x344) returned 0x1 [0143.557] WriteFile (in: hFile=0x344, lpBuffer=0x2733138*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2733138*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0143.558] CloseHandle (hObject=0x344) returned 1 [0143.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0143.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0143.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.560] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.560] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1 [0143.561] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 0 [0143.561] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0143.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0143.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0143.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0143.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.562] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1 [0143.563] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.563] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0143.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0143.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0143.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0143.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0143.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.567] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1 [0143.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0143.568] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1 [0143.569] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.569] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0143.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0143.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0143.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0143.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0143.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.572] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.572] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1 [0143.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0143.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1 [0143.573] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 0 [0143.575] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0143.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0143.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0143.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.578] GetFileType (hFile=0x344) returned 0x1 [0143.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0143.578] GetFileType (hFile=0x344) returned 0x1 [0143.578] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x464 [0143.579] ReadFile (in: hFile=0x344, lpBuffer=0x2739bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x2739bb8*, lpNumberOfBytesRead=0x12db38*=0x464, lpOverlapped=0x0) returned 1 [0143.583] CloseHandle (hObject=0x344) returned 1 [0143.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0143.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0143.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.650] GetFileType (hFile=0x344) returned 0x1 [0143.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0143.651] GetFileType (hFile=0x344) returned 0x1 [0143.651] WriteFile (in: hFile=0x344, lpBuffer=0x278c740*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x278c740*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0143.652] CloseHandle (hObject=0x344) returned 1 [0143.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0143.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.654] GetFileType (hFile=0x344) returned 0x1 [0143.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0143.654] GetFileType (hFile=0x344) returned 0x1 [0143.654] WriteFile (in: hFile=0x344, lpBuffer=0x278d8f8*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x278d8f8*, lpNumberOfBytesWritten=0x12da48*=0x470, lpOverlapped=0x0) returned 1 [0143.656] CloseHandle (hObject=0x344) returned 1 [0143.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0143.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.SYMMYWARE", lpFilePart=0x0) returned 0x68 [0143.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x3f2dad0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0143.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0143.659] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.symmyware")) returned 1 [0143.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0143.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.661] GetFileType (hFile=0x344) returned 0x1 [0143.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0143.661] GetFileType (hFile=0x344) returned 0x1 [0143.661] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x39 [0143.661] ReadFile (in: hFile=0x344, lpBuffer=0x278edd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x278edd0*, lpNumberOfBytesRead=0x12db38*=0x39, lpOverlapped=0x0) returned 1 [0143.663] CloseHandle (hObject=0x344) returned 1 [0143.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0143.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0143.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.675] GetFileType (hFile=0x344) returned 0x1 [0143.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0143.676] GetFileType (hFile=0x344) returned 0x1 [0143.676] WriteFile (in: hFile=0x344, lpBuffer=0x27e04a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x27e04a0*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0143.677] CloseHandle (hObject=0x344) returned 1 [0143.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0143.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0143.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.679] GetFileType (hFile=0x344) returned 0x1 [0143.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0143.679] GetFileType (hFile=0x344) returned 0x1 [0143.680] WriteFile (in: hFile=0x344, lpBuffer=0x27e1640*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x27e1640*, lpNumberOfBytesWritten=0x12da48*=0x40, lpOverlapped=0x0) returned 1 [0143.681] CloseHandle (hObject=0x344) returned 1 [0143.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0143.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.SYMMYWARE", lpFilePart=0x0) returned 0x62 [0143.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x3f65d40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0143.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0143.684] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.symmyware")) returned 1 [0143.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0143.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0143.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0143.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0 [0143.709] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0143.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0143.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0143.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0143.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0143.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.713] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0143.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0143.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0143.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0143.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0143.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.715] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0143.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0143.716] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.716] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0143.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0143.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0143.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0143.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0143.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.718] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0143.719] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0143.720] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0 [0143.720] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0143.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0143.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x64 [0143.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0143.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.722] GetFileType (hFile=0x344) returned 0x1 [0143.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0143.723] GetFileType (hFile=0x344) returned 0x1 [0143.724] WriteFile (in: hFile=0x344, lpBuffer=0x27ea2b8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x27ea2b8*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0143.726] CloseHandle (hObject=0x344) returned 1 [0143.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0143.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0143.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.727] GetFileType (hFile=0x344) returned 0x1 [0143.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0143.727] GetFileType (hFile=0x344) returned 0x1 [0143.729] WriteFile (in: hFile=0x344, lpBuffer=0x27ed5f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27ed5f0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0143.730] CloseHandle (hObject=0x344) returned 1 [0143.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5a [0143.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0143.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.732] GetFileType (hFile=0x344) returned 0x1 [0143.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0143.732] GetFileType (hFile=0x344) returned 0x1 [0143.734] WriteFile (in: hFile=0x344, lpBuffer=0x27f0908*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x27f0908*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0143.735] CloseHandle (hObject=0x344) returned 1 [0143.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0143.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0143.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.737] GetFileType (hFile=0x344) returned 0x1 [0143.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0143.737] GetFileType (hFile=0x344) returned 0x1 [0143.738] WriteFile (in: hFile=0x344, lpBuffer=0x27f3be0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27f3be0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0143.741] CloseHandle (hObject=0x344) returned 1 [0143.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0143.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0143.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.742] GetFileType (hFile=0x344) returned 0x1 [0143.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0143.742] GetFileType (hFile=0x344) returned 0x1 [0143.744] WriteFile (in: hFile=0x344, lpBuffer=0x27f6e98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27f6e98*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0143.745] CloseHandle (hObject=0x344) returned 1 [0143.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0143.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0143.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0143.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.747] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.748] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1eca3c0, ftCreationTime.dwHighDateTime=0x1d5e3b7, ftLastAccessTime.dwLowDateTime=0x53082a0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x53082a0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0xac4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6qFCoBH5lcD.csv", cAlternateFileName="-6QFCO~1.CSV")) returned 1 [0143.748] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53541ed0, ftCreationTime.dwHighDateTime=0x1d5e4d0, ftLastAccessTime.dwLowDateTime=0x46654d0, ftLastAccessTime.dwHighDateTime=0x1d5db8b, ftLastWriteTime.dwLowDateTime=0x46654d0, ftLastWriteTime.dwHighDateTime=0x1d5db8b, nFileSizeHigh=0x0, nFileSizeLow=0x75b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="13XGHyq.jpg", cAlternateFileName="")) returned 1 [0143.749] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd28f2390, ftCreationTime.dwHighDateTime=0x1d5e7e9, ftLastAccessTime.dwLowDateTime=0x1adbbd80, ftLastAccessTime.dwHighDateTime=0x1d5e2ee, ftLastWriteTime.dwLowDateTime=0x1adbbd80, ftLastWriteTime.dwHighDateTime=0x1d5e2ee, nFileSizeHigh=0x0, nFileSizeLow=0x1531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ct5nQh-3iU.avi", cAlternateFileName="1CT5NQ~1.AVI")) returned 1 [0143.749] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21a98510, ftCreationTime.dwHighDateTime=0x1d5da34, ftLastAccessTime.dwLowDateTime=0x4e98f4c0, ftLastAccessTime.dwHighDateTime=0x1d5de4e, ftLastWriteTime.dwLowDateTime=0x4e98f4c0, ftLastWriteTime.dwHighDateTime=0x1d5de4e, nFileSizeHigh=0x0, nFileSizeLow=0xda35, dwReserved0=0x0, dwReserved1=0x0, cFileName="2xJgj.avi", cAlternateFileName="")) returned 1 [0143.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29d1930, ftCreationTime.dwHighDateTime=0x1d5e5e1, ftLastAccessTime.dwLowDateTime=0xeae16190, ftLastAccessTime.dwHighDateTime=0x1d5e0b1, ftLastWriteTime.dwLowDateTime=0xeae16190, ftLastWriteTime.dwHighDateTime=0x1d5e0b1, nFileSizeHigh=0x0, nFileSizeLow=0x11612, dwReserved0=0x0, dwReserved1=0x0, cFileName="3bzSspVoh71rD.mp3", cAlternateFileName="3BZSSP~1.MP3")) returned 1 [0143.750] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98a34450, ftCreationTime.dwHighDateTime=0x1d5e734, ftLastAccessTime.dwLowDateTime=0x8b1728f0, ftLastAccessTime.dwHighDateTime=0x1d5e438, ftLastWriteTime.dwLowDateTime=0x8b1728f0, ftLastWriteTime.dwHighDateTime=0x1d5e438, nFileSizeHigh=0x0, nFileSizeLow=0x1d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_jTq3B4ZkRr.mp3", cAlternateFileName="3_JTQ3~1.MP3")) returned 1 [0143.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe62a2a0, ftCreationTime.dwHighDateTime=0x1d5e5c6, ftLastAccessTime.dwLowDateTime=0x5c16ff40, ftLastAccessTime.dwHighDateTime=0x1d5e801, ftLastWriteTime.dwLowDateTime=0x5c16ff40, ftLastWriteTime.dwHighDateTime=0x1d5e801, nFileSizeHigh=0x0, nFileSizeLow=0xbfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="4rd8UPv Dk zSOfiUu2.png", cAlternateFileName="4RD8UP~1.PNG")) returned 1 [0143.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7290cc0, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8df7fe10, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x8df7fe10, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="52O2gYH1zvPv.png", cAlternateFileName="52O2GY~1.PNG")) returned 1 [0143.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa516d7e0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x9c5c1ac0, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0x9c5c1ac0, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x34b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="6rDWJtN.ots", cAlternateFileName="")) returned 1 [0143.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d9ee0f0, ftCreationTime.dwHighDateTime=0x1d5e727, ftLastAccessTime.dwLowDateTime=0x9f4e35c0, ftLastAccessTime.dwHighDateTime=0x1d5e4c9, ftLastWriteTime.dwLowDateTime=0x9f4e35c0, ftLastWriteTime.dwHighDateTime=0x1d5e4c9, nFileSizeHigh=0x0, nFileSizeLow=0x113bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="7bssgLjpqY.wav", cAlternateFileName="7BSSGL~1.WAV")) returned 1 [0143.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6ac9c30, ftCreationTime.dwHighDateTime=0x1d5deb5, ftLastAccessTime.dwLowDateTime=0x7791a6d0, ftLastAccessTime.dwHighDateTime=0x1d5d8fc, ftLastWriteTime.dwLowDateTime=0x7791a6d0, ftLastWriteTime.dwHighDateTime=0x1d5d8fc, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xf5WEYv9NBhX.mp3", cAlternateFileName="8XF5WE~1.MP3")) returned 1 [0143.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2384b4c0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0x5198a490, ftLastAccessTime.dwHighDateTime=0x1d5dbfb, ftLastWriteTime.dwLowDateTime=0x5198a490, ftLastWriteTime.dwHighDateTime=0x1d5dbfb, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Xw EB.bmp", cAlternateFileName="9XWEB~1.BMP")) returned 1 [0143.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a3194c0, ftCreationTime.dwHighDateTime=0x1d5ddb2, ftLastAccessTime.dwLowDateTime=0x2711f320, ftLastAccessTime.dwHighDateTime=0x1d5dca5, ftLastWriteTime.dwLowDateTime=0x2711f320, ftLastWriteTime.dwHighDateTime=0x1d5dca5, nFileSizeHigh=0x0, nFileSizeLow=0x1519e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aaUQ h40W9MZHs6O4Y.docx", cAlternateFileName="AAUQH4~1.DOC")) returned 1 [0143.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0143.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst449D.tmp", cAlternateFileName="")) returned 1 [0143.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0143.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49b7d610, ftCreationTime.dwHighDateTime=0x1d5d822, ftLastAccessTime.dwLowDateTime=0x5c6794a0, ftLastAccessTime.dwHighDateTime=0x1d5e0cc, ftLastWriteTime.dwLowDateTime=0x5c6794a0, ftLastWriteTime.dwHighDateTime=0x1d5e0cc, nFileSizeHigh=0x0, nFileSizeLow=0x11011, dwReserved0=0x0, dwReserved1=0x0, cFileName="cS5B.avi", cAlternateFileName="")) returned 1 [0143.757] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb34a820, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb370980, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb370980, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D00A.tmp", cAlternateFileName="")) returned 1 [0143.757] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb408f00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb408f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb408f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D05A.tmp", cAlternateFileName="")) returned 1 [0143.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1d7d500, ftCreationTime.dwHighDateTime=0x1d5d8bb, ftLastAccessTime.dwLowDateTime=0xd2a2bae0, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0xd2a2bae0, ftLastWriteTime.dwHighDateTime=0x1d5e5e1, nFileSizeHigh=0x0, nFileSizeLow=0x9f9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dz56hlsr.avi", cAlternateFileName="")) returned 1 [0143.758] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0143.759] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0143.759] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x71424f80, ftCreationTime.dwHighDateTime=0x1d5e1e1, ftLastAccessTime.dwLowDateTime=0x8db1a0, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x8db1a0, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0x49fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="JxAZg8v656ANpm 0b55.bmp", cAlternateFileName="JXAZG8~1.BMP")) returned 1 [0143.760] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671cd790, ftCreationTime.dwHighDateTime=0x1d5df0d, ftLastAccessTime.dwLowDateTime=0x785b0a10, ftLastAccessTime.dwHighDateTime=0x1d5e3ac, ftLastWriteTime.dwLowDateTime=0x785b0a10, ftLastWriteTime.dwHighDateTime=0x1d5e3ac, nFileSizeHigh=0x0, nFileSizeLow=0xd95, dwReserved0=0x0, dwReserved1=0x0, cFileName="K2RedS3I2C.wav", cAlternateFileName="K2REDS~1.WAV")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf46dac0, ftCreationTime.dwHighDateTime=0x1d5dbab, ftLastAccessTime.dwLowDateTime=0xe7042560, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0xe7042560, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x992e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LsWE7QO2IO9.gif", cAlternateFileName="LSWE7Q~1.GIF")) returned 1 [0143.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5d49a7d0, ftCreationTime.dwHighDateTime=0x1d5e6cd, ftLastAccessTime.dwLowDateTime=0x71db5770, ftLastAccessTime.dwHighDateTime=0x1d5dc8c, ftLastWriteTime.dwLowDateTime=0x71db5770, ftLastWriteTime.dwHighDateTime=0x1d5dc8c, nFileSizeHigh=0x0, nFileSizeLow=0x18488, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAhS0i2IM 4BVR.flv", cAlternateFileName="MAHS0I~1.FLV")) returned 1 [0143.762] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ade7a30, ftCreationTime.dwHighDateTime=0x1d5e37e, ftLastAccessTime.dwLowDateTime=0xd413ff30, ftLastAccessTime.dwHighDateTime=0x1d5d8dd, ftLastWriteTime.dwLowDateTime=0xd413ff30, ftLastWriteTime.dwHighDateTime=0x1d5d8dd, nFileSizeHigh=0x0, nFileSizeLow=0xb155, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGAV.swf", cAlternateFileName="")) returned 1 [0143.762] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a3655b0, ftCreationTime.dwHighDateTime=0x1d5e1b6, ftLastAccessTime.dwLowDateTime=0x487d58d0, ftLastAccessTime.dwHighDateTime=0x1d5dffa, ftLastWriteTime.dwLowDateTime=0x487d58d0, ftLastWriteTime.dwHighDateTime=0x1d5dffa, nFileSizeHigh=0x0, nFileSizeLow=0x597b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pjyk2JIO6mB7Z.wav", cAlternateFileName="PJYK2J~1.WAV")) returned 1 [0143.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec3f40, ftCreationTime.dwHighDateTime=0x1d5e0db, ftLastAccessTime.dwLowDateTime=0xfd23200, ftLastAccessTime.dwHighDateTime=0x1d5e129, ftLastWriteTime.dwLowDateTime=0xfd23200, ftLastWriteTime.dwHighDateTime=0x1d5e129, nFileSizeHigh=0x0, nFileSizeLow=0x2b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCpRxBOtFTp.wav", cAlternateFileName="RCPRXB~1.WAV")) returned 1 [0143.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd106e9d0, ftCreationTime.dwHighDateTime=0x1d5e7d1, ftLastAccessTime.dwLowDateTime=0xe9d547b0, ftLastAccessTime.dwHighDateTime=0x1d5e3f1, ftLastWriteTime.dwLowDateTime=0xe9d547b0, ftLastWriteTime.dwHighDateTime=0x1d5e3f1, nFileSizeHigh=0x0, nFileSizeLow=0x493a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoXJWNwAfc.pdf", cAlternateFileName="SOXJWN~1.PDF")) returned 1 [0143.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfc70e90, ftCreationTime.dwHighDateTime=0x1d5dedd, ftLastAccessTime.dwLowDateTime=0xb45e3b80, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0xb45e3b80, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x40c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="sufs0_IQLgp0.csv", cAlternateFileName="SUFS0_~1.CSV")) returned 1 [0143.764] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0143.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x988fa930, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0x999b7850, ftLastAccessTime.dwHighDateTime=0x1d5da41, ftLastWriteTime.dwLowDateTime=0x999b7850, ftLastWriteTime.dwHighDateTime=0x1d5da41, nFileSizeHigh=0x0, nFileSizeLow=0x7e89, dwReserved0=0x0, dwReserved1=0x0, cFileName="TzYOwSuaefXmc0CGL.mp3", cAlternateFileName="TZYOWS~1.MP3")) returned 1 [0143.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e43f760, ftCreationTime.dwHighDateTime=0x1d5db63, ftLastAccessTime.dwLowDateTime=0x68aa8710, ftLastAccessTime.dwHighDateTime=0x1d5e0bb, ftLastWriteTime.dwLowDateTime=0x68aa8710, ftLastWriteTime.dwHighDateTime=0x1d5e0bb, nFileSizeHigh=0x0, nFileSizeLow=0x172a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VasYhL35yRx-1q2qQYHD.wav", cAlternateFileName="VASYHL~1.WAV")) returned 1 [0143.765] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9640fd30, ftCreationTime.dwHighDateTime=0x1d5e098, ftLastAccessTime.dwLowDateTime=0xb14747b0, ftLastAccessTime.dwHighDateTime=0x1d5e692, ftLastWriteTime.dwLowDateTime=0xb14747b0, ftLastWriteTime.dwHighDateTime=0x1d5e692, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WGn487m1AsTH0p6.swf", cAlternateFileName="WGN487~1.SWF")) returned 1 [0143.766] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfb629fe0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0143.766] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b143480, ftCreationTime.dwHighDateTime=0x1d5dd82, ftLastAccessTime.dwLowDateTime=0x7c38d5a0, ftLastAccessTime.dwHighDateTime=0x1d5db4a, ftLastWriteTime.dwLowDateTime=0x7c38d5a0, ftLastWriteTime.dwHighDateTime=0x1d5db4a, nFileSizeHigh=0x0, nFileSizeLow=0x556c, dwReserved0=0x0, dwReserved1=0x0, cFileName="X_RvCO 5dduz.docx", cAlternateFileName="X_RVCO~1.DOC")) returned 1 [0143.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x12185fc0, ftCreationTime.dwHighDateTime=0x1d5dcbb, ftLastAccessTime.dwLowDateTime=0xe24d4e0, ftLastAccessTime.dwHighDateTime=0x1d5d7cd, ftLastWriteTime.dwLowDateTime=0xe24d4e0, ftLastWriteTime.dwHighDateTime=0x1d5d7cd, nFileSizeHigh=0x0, nFileSizeLow=0x6973, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymr7FnsB61k.flv", cAlternateFileName="YMR7FN~1.FLV")) returned 1 [0143.767] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c1030d0, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0x47494650, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0x47494650, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x123f, dwReserved0=0x0, dwReserved1=0x0, cFileName="yMZUHw.mp3", cAlternateFileName="")) returned 1 [0143.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdfd7ee0, ftCreationTime.dwHighDateTime=0x1d5d7c1, ftLastAccessTime.dwLowDateTime=0xaa6a92a0, ftLastAccessTime.dwHighDateTime=0x1d5dd9e, ftLastWriteTime.dwLowDateTime=0xaa6a92a0, ftLastWriteTime.dwHighDateTime=0x1d5dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe308, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY-OM.mp3", cAlternateFileName="")) returned 1 [0143.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea933c70, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x5ffb0030, ftLastAccessTime.dwHighDateTime=0x1d5dffe, ftLastWriteTime.dwLowDateTime=0x5ffb0030, ftLastWriteTime.dwHighDateTime=0x1d5dffe, nFileSizeHigh=0x0, nFileSizeLow=0x7449, dwReserved0=0x0, dwReserved1=0x0, cFileName="_q22--4eGFVlkNE7KK.flv", cAlternateFileName="_Q22--~1.FLV")) returned 1 [0143.768] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.769] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0143.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0143.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0143.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0143.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0143.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0143.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1eca3c0, ftCreationTime.dwHighDateTime=0x1d5e3b7, ftLastAccessTime.dwLowDateTime=0x53082a0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x53082a0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0xac4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6qFCoBH5lcD.csv", cAlternateFileName="-6QFCO~1.CSV")) returned 1 [0143.773] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53541ed0, ftCreationTime.dwHighDateTime=0x1d5e4d0, ftLastAccessTime.dwLowDateTime=0x46654d0, ftLastAccessTime.dwHighDateTime=0x1d5db8b, ftLastWriteTime.dwLowDateTime=0x46654d0, ftLastWriteTime.dwHighDateTime=0x1d5db8b, nFileSizeHigh=0x0, nFileSizeLow=0x75b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="13XGHyq.jpg", cAlternateFileName="")) returned 1 [0143.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd28f2390, ftCreationTime.dwHighDateTime=0x1d5e7e9, ftLastAccessTime.dwLowDateTime=0x1adbbd80, ftLastAccessTime.dwHighDateTime=0x1d5e2ee, ftLastWriteTime.dwLowDateTime=0x1adbbd80, ftLastWriteTime.dwHighDateTime=0x1d5e2ee, nFileSizeHigh=0x0, nFileSizeLow=0x1531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ct5nQh-3iU.avi", cAlternateFileName="1CT5NQ~1.AVI")) returned 1 [0143.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21a98510, ftCreationTime.dwHighDateTime=0x1d5da34, ftLastAccessTime.dwLowDateTime=0x4e98f4c0, ftLastAccessTime.dwHighDateTime=0x1d5de4e, ftLastWriteTime.dwLowDateTime=0x4e98f4c0, ftLastWriteTime.dwHighDateTime=0x1d5de4e, nFileSizeHigh=0x0, nFileSizeLow=0xda35, dwReserved0=0x0, dwReserved1=0x0, cFileName="2xJgj.avi", cAlternateFileName="")) returned 1 [0143.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29d1930, ftCreationTime.dwHighDateTime=0x1d5e5e1, ftLastAccessTime.dwLowDateTime=0xeae16190, ftLastAccessTime.dwHighDateTime=0x1d5e0b1, ftLastWriteTime.dwLowDateTime=0xeae16190, ftLastWriteTime.dwHighDateTime=0x1d5e0b1, nFileSizeHigh=0x0, nFileSizeLow=0x11612, dwReserved0=0x0, dwReserved1=0x0, cFileName="3bzSspVoh71rD.mp3", cAlternateFileName="3BZSSP~1.MP3")) returned 1 [0143.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98a34450, ftCreationTime.dwHighDateTime=0x1d5e734, ftLastAccessTime.dwLowDateTime=0x8b1728f0, ftLastAccessTime.dwHighDateTime=0x1d5e438, ftLastWriteTime.dwLowDateTime=0x8b1728f0, ftLastWriteTime.dwHighDateTime=0x1d5e438, nFileSizeHigh=0x0, nFileSizeLow=0x1d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="3_jTq3B4ZkRr.mp3", cAlternateFileName="3_JTQ3~1.MP3")) returned 1 [0143.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe62a2a0, ftCreationTime.dwHighDateTime=0x1d5e5c6, ftLastAccessTime.dwLowDateTime=0x5c16ff40, ftLastAccessTime.dwHighDateTime=0x1d5e801, ftLastWriteTime.dwLowDateTime=0x5c16ff40, ftLastWriteTime.dwHighDateTime=0x1d5e801, nFileSizeHigh=0x0, nFileSizeLow=0xbfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="4rd8UPv Dk zSOfiUu2.png", cAlternateFileName="4RD8UP~1.PNG")) returned 1 [0143.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7290cc0, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8df7fe10, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x8df7fe10, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="52O2gYH1zvPv.png", cAlternateFileName="52O2GY~1.PNG")) returned 1 [0143.780] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa516d7e0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x9c5c1ac0, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0x9c5c1ac0, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x34b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="6rDWJtN.ots", cAlternateFileName="")) returned 1 [0143.781] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d9ee0f0, ftCreationTime.dwHighDateTime=0x1d5e727, ftLastAccessTime.dwLowDateTime=0x9f4e35c0, ftLastAccessTime.dwHighDateTime=0x1d5e4c9, ftLastWriteTime.dwLowDateTime=0x9f4e35c0, ftLastWriteTime.dwHighDateTime=0x1d5e4c9, nFileSizeHigh=0x0, nFileSizeLow=0x113bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="7bssgLjpqY.wav", cAlternateFileName="7BSSGL~1.WAV")) returned 1 [0143.781] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6ac9c30, ftCreationTime.dwHighDateTime=0x1d5deb5, ftLastAccessTime.dwLowDateTime=0x7791a6d0, ftLastAccessTime.dwHighDateTime=0x1d5d8fc, ftLastWriteTime.dwLowDateTime=0x7791a6d0, ftLastWriteTime.dwHighDateTime=0x1d5d8fc, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xf5WEYv9NBhX.mp3", cAlternateFileName="8XF5WE~1.MP3")) returned 1 [0143.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2384b4c0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0x5198a490, ftLastAccessTime.dwHighDateTime=0x1d5dbfb, ftLastWriteTime.dwLowDateTime=0x5198a490, ftLastWriteTime.dwHighDateTime=0x1d5dbfb, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Xw EB.bmp", cAlternateFileName="9XWEB~1.BMP")) returned 1 [0143.782] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a3194c0, ftCreationTime.dwHighDateTime=0x1d5ddb2, ftLastAccessTime.dwLowDateTime=0x2711f320, ftLastAccessTime.dwHighDateTime=0x1d5dca5, ftLastWriteTime.dwLowDateTime=0x2711f320, ftLastWriteTime.dwHighDateTime=0x1d5dca5, nFileSizeHigh=0x0, nFileSizeLow=0x1519e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aaUQ h40W9MZHs6O4Y.docx", cAlternateFileName="AAUQH4~1.DOC")) returned 1 [0143.783] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0143.783] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst449D.tmp", cAlternateFileName="")) returned 1 [0143.783] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0143.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49b7d610, ftCreationTime.dwHighDateTime=0x1d5d822, ftLastAccessTime.dwLowDateTime=0x5c6794a0, ftLastAccessTime.dwHighDateTime=0x1d5e0cc, ftLastWriteTime.dwLowDateTime=0x5c6794a0, ftLastWriteTime.dwHighDateTime=0x1d5e0cc, nFileSizeHigh=0x0, nFileSizeLow=0x11011, dwReserved0=0x0, dwReserved1=0x0, cFileName="cS5B.avi", cAlternateFileName="")) returned 1 [0143.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb34a820, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb370980, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb370980, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D00A.tmp", cAlternateFileName="")) returned 1 [0143.784] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb408f00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb408f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb408f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D05A.tmp", cAlternateFileName="")) returned 1 [0143.785] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1d7d500, ftCreationTime.dwHighDateTime=0x1d5d8bb, ftLastAccessTime.dwLowDateTime=0xd2a2bae0, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0xd2a2bae0, ftLastWriteTime.dwHighDateTime=0x1d5e5e1, nFileSizeHigh=0x0, nFileSizeLow=0x9f9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dz56hlsr.avi", cAlternateFileName="")) returned 1 [0143.785] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0143.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0143.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x71424f80, ftCreationTime.dwHighDateTime=0x1d5e1e1, ftLastAccessTime.dwLowDateTime=0x8db1a0, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x8db1a0, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0x49fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="JxAZg8v656ANpm 0b55.bmp", cAlternateFileName="JXAZG8~1.BMP")) returned 1 [0143.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671cd790, ftCreationTime.dwHighDateTime=0x1d5df0d, ftLastAccessTime.dwLowDateTime=0x785b0a10, ftLastAccessTime.dwHighDateTime=0x1d5e3ac, ftLastWriteTime.dwLowDateTime=0x785b0a10, ftLastWriteTime.dwHighDateTime=0x1d5e3ac, nFileSizeHigh=0x0, nFileSizeLow=0xd95, dwReserved0=0x0, dwReserved1=0x0, cFileName="K2RedS3I2C.wav", cAlternateFileName="K2REDS~1.WAV")) returned 1 [0143.787] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf46dac0, ftCreationTime.dwHighDateTime=0x1d5dbab, ftLastAccessTime.dwLowDateTime=0xe7042560, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0xe7042560, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x992e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LsWE7QO2IO9.gif", cAlternateFileName="LSWE7Q~1.GIF")) returned 1 [0143.787] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5d49a7d0, ftCreationTime.dwHighDateTime=0x1d5e6cd, ftLastAccessTime.dwLowDateTime=0x71db5770, ftLastAccessTime.dwHighDateTime=0x1d5dc8c, ftLastWriteTime.dwLowDateTime=0x71db5770, ftLastWriteTime.dwHighDateTime=0x1d5dc8c, nFileSizeHigh=0x0, nFileSizeLow=0x18488, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAhS0i2IM 4BVR.flv", cAlternateFileName="MAHS0I~1.FLV")) returned 1 [0143.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ade7a30, ftCreationTime.dwHighDateTime=0x1d5e37e, ftLastAccessTime.dwLowDateTime=0xd413ff30, ftLastAccessTime.dwHighDateTime=0x1d5d8dd, ftLastWriteTime.dwLowDateTime=0xd413ff30, ftLastWriteTime.dwHighDateTime=0x1d5d8dd, nFileSizeHigh=0x0, nFileSizeLow=0xb155, dwReserved0=0x0, dwReserved1=0x0, cFileName="nGAV.swf", cAlternateFileName="")) returned 1 [0143.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a3655b0, ftCreationTime.dwHighDateTime=0x1d5e1b6, ftLastAccessTime.dwLowDateTime=0x487d58d0, ftLastAccessTime.dwHighDateTime=0x1d5dffa, ftLastWriteTime.dwLowDateTime=0x487d58d0, ftLastWriteTime.dwHighDateTime=0x1d5dffa, nFileSizeHigh=0x0, nFileSizeLow=0x597b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pjyk2JIO6mB7Z.wav", cAlternateFileName="PJYK2J~1.WAV")) returned 1 [0143.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec3f40, ftCreationTime.dwHighDateTime=0x1d5e0db, ftLastAccessTime.dwLowDateTime=0xfd23200, ftLastAccessTime.dwHighDateTime=0x1d5e129, ftLastWriteTime.dwLowDateTime=0xfd23200, ftLastWriteTime.dwHighDateTime=0x1d5e129, nFileSizeHigh=0x0, nFileSizeLow=0x2b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCpRxBOtFTp.wav", cAlternateFileName="RCPRXB~1.WAV")) returned 1 [0143.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd106e9d0, ftCreationTime.dwHighDateTime=0x1d5e7d1, ftLastAccessTime.dwLowDateTime=0xe9d547b0, ftLastAccessTime.dwHighDateTime=0x1d5e3f1, ftLastWriteTime.dwLowDateTime=0xe9d547b0, ftLastWriteTime.dwHighDateTime=0x1d5e3f1, nFileSizeHigh=0x0, nFileSizeLow=0x493a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoXJWNwAfc.pdf", cAlternateFileName="SOXJWN~1.PDF")) returned 1 [0143.789] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfc70e90, ftCreationTime.dwHighDateTime=0x1d5dedd, ftLastAccessTime.dwLowDateTime=0xb45e3b80, ftLastAccessTime.dwHighDateTime=0x1d5dd59, ftLastWriteTime.dwLowDateTime=0xb45e3b80, ftLastWriteTime.dwHighDateTime=0x1d5dd59, nFileSizeHigh=0x0, nFileSizeLow=0x40c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="sufs0_IQLgp0.csv", cAlternateFileName="SUFS0_~1.CSV")) returned 1 [0143.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0143.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x988fa930, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0x999b7850, ftLastAccessTime.dwHighDateTime=0x1d5da41, ftLastWriteTime.dwLowDateTime=0x999b7850, ftLastWriteTime.dwHighDateTime=0x1d5da41, nFileSizeHigh=0x0, nFileSizeLow=0x7e89, dwReserved0=0x0, dwReserved1=0x0, cFileName="TzYOwSuaefXmc0CGL.mp3", cAlternateFileName="TZYOWS~1.MP3")) returned 1 [0143.791] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e43f760, ftCreationTime.dwHighDateTime=0x1d5db63, ftLastAccessTime.dwLowDateTime=0x68aa8710, ftLastAccessTime.dwHighDateTime=0x1d5e0bb, ftLastWriteTime.dwLowDateTime=0x68aa8710, ftLastWriteTime.dwHighDateTime=0x1d5e0bb, nFileSizeHigh=0x0, nFileSizeLow=0x172a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VasYhL35yRx-1q2qQYHD.wav", cAlternateFileName="VASYHL~1.WAV")) returned 1 [0143.791] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9640fd30, ftCreationTime.dwHighDateTime=0x1d5e098, ftLastAccessTime.dwLowDateTime=0xb14747b0, ftLastAccessTime.dwHighDateTime=0x1d5e692, ftLastWriteTime.dwLowDateTime=0xb14747b0, ftLastWriteTime.dwHighDateTime=0x1d5e692, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WGn487m1AsTH0p6.swf", cAlternateFileName="WGN487~1.SWF")) returned 1 [0143.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfb629fe0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfb629fe0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfb629fe0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0143.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b143480, ftCreationTime.dwHighDateTime=0x1d5dd82, ftLastAccessTime.dwLowDateTime=0x7c38d5a0, ftLastAccessTime.dwHighDateTime=0x1d5db4a, ftLastWriteTime.dwLowDateTime=0x7c38d5a0, ftLastWriteTime.dwHighDateTime=0x1d5db4a, nFileSizeHigh=0x0, nFileSizeLow=0x556c, dwReserved0=0x0, dwReserved1=0x0, cFileName="X_RvCO 5dduz.docx", cAlternateFileName="X_RVCO~1.DOC")) returned 1 [0143.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x12185fc0, ftCreationTime.dwHighDateTime=0x1d5dcbb, ftLastAccessTime.dwLowDateTime=0xe24d4e0, ftLastAccessTime.dwHighDateTime=0x1d5d7cd, ftLastWriteTime.dwLowDateTime=0xe24d4e0, ftLastWriteTime.dwHighDateTime=0x1d5d7cd, nFileSizeHigh=0x0, nFileSizeLow=0x6973, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymr7FnsB61k.flv", cAlternateFileName="YMR7FN~1.FLV")) returned 1 [0143.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c1030d0, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0x47494650, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0x47494650, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x123f, dwReserved0=0x0, dwReserved1=0x0, cFileName="yMZUHw.mp3", cAlternateFileName="")) returned 1 [0143.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdfd7ee0, ftCreationTime.dwHighDateTime=0x1d5d7c1, ftLastAccessTime.dwLowDateTime=0xaa6a92a0, ftLastAccessTime.dwHighDateTime=0x1d5dd9e, ftLastWriteTime.dwLowDateTime=0xaa6a92a0, ftLastWriteTime.dwHighDateTime=0x1d5dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe308, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY-OM.mp3", cAlternateFileName="")) returned 1 [0143.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea933c70, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x5ffb0030, ftLastAccessTime.dwHighDateTime=0x1d5dffe, ftLastWriteTime.dwLowDateTime=0x5ffb0030, ftLastWriteTime.dwHighDateTime=0x1d5dffe, nFileSizeHigh=0x0, nFileSizeLow=0x7449, dwReserved0=0x0, dwReserved1=0x0, cFileName="_q22--4eGFVlkNE7KK.flv", cAlternateFileName="_Q22--~1.FLV")) returned 1 [0143.794] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea933c70, ftCreationTime.dwHighDateTime=0x1d5d8ac, ftLastAccessTime.dwLowDateTime=0x5ffb0030, ftLastAccessTime.dwHighDateTime=0x1d5dffe, ftLastWriteTime.dwLowDateTime=0x5ffb0030, ftLastWriteTime.dwHighDateTime=0x1d5dffe, nFileSizeHigh=0x0, nFileSizeLow=0x7449, dwReserved0=0x0, dwReserved1=0x0, cFileName="_q22--4eGFVlkNE7KK.flv", cAlternateFileName="_Q22--~1.FLV")) returned 0 [0143.794] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0143.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0143.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0143.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", lpFilePart=0x0) returned 0x41 [0143.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0143.795] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xac4a [0143.795] ReadFile (in: hFile=0x344, lpBuffer=0x2803f88, nNumberOfBytesToRead=0xac4a, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2803f88*, lpNumberOfBytesRead=0x12dc38*=0xac4a, lpOverlapped=0x0) returned 1 [0143.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", lpFilePart=0x0) returned 0x41 [0143.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0143.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.890] GetFileType (hFile=0x344) returned 0x1 [0143.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0143.890] GetFileType (hFile=0x344) returned 0x1 [0143.890] WriteFile (in: hFile=0x344, lpBuffer=0x287f5e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x287f5e8*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0143.892] CloseHandle (hObject=0x344) returned 1 [0143.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", lpFilePart=0x0) returned 0x41 [0143.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.894] GetFileType (hFile=0x344) returned 0x1 [0143.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0143.894] GetFileType (hFile=0x344) returned 0x1 [0143.894] WriteFile (in: hFile=0x344, lpBuffer=0x2873318*, nNumberOfBytesToWrite=0xac50, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x2873318*, lpNumberOfBytesWritten=0x12dc98*=0xac50, lpOverlapped=0x0) returned 1 [0143.897] CloseHandle (hObject=0x344) returned 1 [0143.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv", lpFilePart=0x0) returned 0x41 [0143.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0143.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1eca3c0, ftCreationTime.dwHighDateTime=0x1d5e3b7, ftLastAccessTime.dwLowDateTime=0x53082a0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x413a940, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xac50)) returned 1 [0143.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0143.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\-6qFCoBH5lcD.csv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\-6qfcobh5lcd.csv.symmyware")) returned 1 [0143.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", lpFilePart=0x0) returned 0x3c [0143.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.903] GetFileType (hFile=0x344) returned 0x1 [0143.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0143.903] GetFileType (hFile=0x344) returned 0x1 [0143.903] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x75b5 [0143.903] ReadFile (in: hFile=0x344, lpBuffer=0x2880ae0, nNumberOfBytesToRead=0x75b5, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2880ae0*, lpNumberOfBytesRead=0x12dc38*=0x75b5, lpOverlapped=0x0) returned 1 [0143.905] CloseHandle (hObject=0x344) returned 1 [0143.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", lpFilePart=0x0) returned 0x3c [0143.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0143.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0143.988] GetFileType (hFile=0x344) returned 0x1 [0143.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0143.989] GetFileType (hFile=0x344) returned 0x1 [0143.989] WriteFile (in: hFile=0x344, lpBuffer=0x2706568*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2706568*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0143.991] CloseHandle (hObject=0x344) returned 1 [0143.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", lpFilePart=0x0) returned 0x3c [0143.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0143.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0143.994] GetFileType (hFile=0x344) returned 0x1 [0143.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0143.994] GetFileType (hFile=0x344) returned 0x1 [0143.994] WriteFile (in: hFile=0x344, lpBuffer=0x26fd940*, nNumberOfBytesToWrite=0x75c0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x26fd940*, lpNumberOfBytesWritten=0x12dc98*=0x75c0, lpOverlapped=0x0) returned 1 [0143.996] CloseHandle (hObject=0x344) returned 1 [0143.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg", lpFilePart=0x0) returned 0x3c [0143.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x46 [0143.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0143.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53541ed0, ftCreationTime.dwHighDateTime=0x1d5e4d0, ftLastAccessTime.dwLowDateTime=0x46654d0, ftLastAccessTime.dwHighDateTime=0x1d5db8b, ftLastWriteTime.dwLowDateTime=0x422c470, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x75c0)) returned 1 [0143.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0143.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\13XGHyq.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\13xghyq.jpg.symmyware")) returned 1 [0144.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", lpFilePart=0x0) returned 0x40 [0144.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.001] GetFileType (hFile=0x344) returned 0x1 [0144.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.001] GetFileType (hFile=0x344) returned 0x1 [0144.001] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1531b [0144.002] ReadFile (in: hFile=0x344, lpBuffer=0x12774c28, nNumberOfBytesToRead=0x1531b, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12774c28*, lpNumberOfBytesRead=0x12dc38*=0x1531b, lpOverlapped=0x0) returned 1 [0144.004] CloseHandle (hObject=0x344) returned 1 [0144.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", lpFilePart=0x0) returned 0x40 [0144.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.037] GetFileType (hFile=0x344) returned 0x1 [0144.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.038] GetFileType (hFile=0x344) returned 0x1 [0144.038] WriteFile (in: hFile=0x344, lpBuffer=0x2758100*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2758100*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.040] CloseHandle (hObject=0x344) returned 1 [0144.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", lpFilePart=0x0) returned 0x40 [0144.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.041] GetFileType (hFile=0x344) returned 0x1 [0144.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.042] GetFileType (hFile=0x344) returned 0x1 [0144.042] WriteFile (in: hFile=0x344, lpBuffer=0x127dec68*, nNumberOfBytesToWrite=0x15320, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x127dec68*, lpNumberOfBytesWritten=0x12dc98*=0x15320, lpOverlapped=0x0) returned 1 [0144.045] CloseHandle (hObject=0x344) returned 1 [0144.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi", lpFilePart=0x0) returned 0x40 [0144.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0144.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd28f2390, ftCreationTime.dwHighDateTime=0x1d5e7e9, ftLastAccessTime.dwLowDateTime=0x1adbbd80, ftLastAccessTime.dwHighDateTime=0x1d5e2ee, ftLastWriteTime.dwLowDateTime=0x4295420, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15320)) returned 1 [0144.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1ct5nQh-3iU.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1ct5nqh-3iu.avi.symmyware")) returned 1 [0144.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", lpFilePart=0x0) returned 0x3a [0144.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.049] GetFileType (hFile=0x344) returned 0x1 [0144.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.049] GetFileType (hFile=0x344) returned 0x1 [0144.049] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xda35 [0144.049] ReadFile (in: hFile=0x344, lpBuffer=0x27595e8, nNumberOfBytesToRead=0xda35, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27595e8*, lpNumberOfBytesRead=0x12dc38*=0xda35, lpOverlapped=0x0) returned 1 [0144.051] CloseHandle (hObject=0x344) returned 1 [0144.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", lpFilePart=0x0) returned 0x3a [0144.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.067] GetFileType (hFile=0x344) returned 0x1 [0144.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.067] GetFileType (hFile=0x344) returned 0x1 [0144.068] WriteFile (in: hFile=0x344, lpBuffer=0x27e03e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x27e03e8*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.069] CloseHandle (hObject=0x344) returned 1 [0144.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", lpFilePart=0x0) returned 0x3a [0144.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.071] GetFileType (hFile=0x344) returned 0x1 [0144.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.071] GetFileType (hFile=0x344) returned 0x1 [0144.071] WriteFile (in: hFile=0x344, lpBuffer=0x27d1348*, nNumberOfBytesToWrite=0xda40, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x27d1348*, lpNumberOfBytesWritten=0x12dc98*=0xda40, lpOverlapped=0x0) returned 1 [0144.074] CloseHandle (hObject=0x344) returned 1 [0144.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi", lpFilePart=0x0) returned 0x3a [0144.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0144.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21a98510, ftCreationTime.dwHighDateTime=0x1d5da34, ftLastAccessTime.dwLowDateTime=0x4e98f4c0, ftLastAccessTime.dwHighDateTime=0x1d5de4e, ftLastWriteTime.dwLowDateTime=0x42d99e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xda40)) returned 1 [0144.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2xJgj.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2xjgj.avi.symmyware")) returned 1 [0144.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", lpFilePart=0x0) returned 0x48 [0144.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.076] GetFileType (hFile=0x344) returned 0x1 [0144.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.076] GetFileType (hFile=0x344) returned 0x1 [0144.076] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xbfaf [0144.076] ReadFile (in: hFile=0x344, lpBuffer=0x27e1920, nNumberOfBytesToRead=0xbfaf, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27e1920*, lpNumberOfBytesRead=0x12dc38*=0xbfaf, lpOverlapped=0x0) returned 1 [0144.078] CloseHandle (hObject=0x344) returned 1 [0144.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", lpFilePart=0x0) returned 0x48 [0144.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.088] GetFileType (hFile=0x344) returned 0x1 [0144.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.089] GetFileType (hFile=0x344) returned 0x1 [0144.089] WriteFile (in: hFile=0x344, lpBuffer=0x2861d18*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2861d18*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.090] CloseHandle (hObject=0x344) returned 1 [0144.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", lpFilePart=0x0) returned 0x48 [0144.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.092] GetFileType (hFile=0x344) returned 0x1 [0144.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.092] GetFileType (hFile=0x344) returned 0x1 [0144.092] WriteFile (in: hFile=0x344, lpBuffer=0x28546d0*, nNumberOfBytesToWrite=0xbfb0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x28546d0*, lpNumberOfBytesWritten=0x12dc98*=0xbfb0, lpOverlapped=0x0) returned 1 [0144.094] CloseHandle (hObject=0x344) returned 1 [0144.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png", lpFilePart=0x0) returned 0x48 [0144.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0144.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe62a2a0, ftCreationTime.dwHighDateTime=0x1d5e5c6, ftLastAccessTime.dwLowDateTime=0x5c16ff40, ftLastAccessTime.dwHighDateTime=0x1d5e801, ftLastWriteTime.dwLowDateTime=0x430a720, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbfb0)) returned 1 [0144.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.095] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\4rd8UPv Dk zSOfiUu2.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\4rd8upv dk zsofiuu2.png.symmyware")) returned 1 [0144.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", lpFilePart=0x0) returned 0x41 [0144.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.097] GetFileType (hFile=0x344) returned 0x1 [0144.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.098] GetFileType (hFile=0x344) returned 0x1 [0144.098] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xeb78 [0144.098] ReadFile (in: hFile=0x344, lpBuffer=0x2863270, nNumberOfBytesToRead=0xeb78, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2863270*, lpNumberOfBytesRead=0x12dc38*=0xeb78, lpOverlapped=0x0) returned 1 [0144.101] CloseHandle (hObject=0x344) returned 1 [0144.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", lpFilePart=0x0) returned 0x41 [0144.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.126] GetFileType (hFile=0x344) returned 0x1 [0144.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.126] GetFileType (hFile=0x344) returned 0x1 [0144.126] WriteFile (in: hFile=0x344, lpBuffer=0x270af90*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x270af90*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.127] CloseHandle (hObject=0x344) returned 1 [0144.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", lpFilePart=0x0) returned 0x41 [0144.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.129] GetFileType (hFile=0x344) returned 0x1 [0144.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.129] GetFileType (hFile=0x344) returned 0x1 [0144.129] WriteFile (in: hFile=0x344, lpBuffer=0x26fad90*, nNumberOfBytesToWrite=0xeb80, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x26fad90*, lpNumberOfBytesWritten=0x12dc98*=0xeb80, lpOverlapped=0x0) returned 1 [0144.131] CloseHandle (hObject=0x344) returned 1 [0144.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png", lpFilePart=0x0) returned 0x41 [0144.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0144.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7290cc0, ftCreationTime.dwHighDateTime=0x1d5e748, ftLastAccessTime.dwLowDateTime=0x8df7fe10, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x4367380, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xeb80)) returned 1 [0144.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.133] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\52O2gYH1zvPv.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\52o2gyh1zvpv.png.symmyware")) returned 1 [0144.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", lpFilePart=0x0) returned 0x48 [0144.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.134] GetFileType (hFile=0x344) returned 0x1 [0144.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.134] GetFileType (hFile=0x344) returned 0x1 [0144.134] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1519e [0144.135] ReadFile (in: hFile=0x344, lpBuffer=0x12844ae8, nNumberOfBytesToRead=0x1519e, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12844ae8*, lpNumberOfBytesRead=0x12dc38*=0x1519e, lpOverlapped=0x0) returned 1 [0144.137] CloseHandle (hObject=0x344) returned 1 [0144.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", lpFilePart=0x0) returned 0x48 [0144.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.212] GetFileType (hFile=0x344) returned 0x1 [0144.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.212] GetFileType (hFile=0x344) returned 0x1 [0144.212] WriteFile (in: hFile=0x344, lpBuffer=0x275cc38*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x275cc38*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.214] CloseHandle (hObject=0x344) returned 1 [0144.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", lpFilePart=0x0) returned 0x48 [0144.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.215] GetFileType (hFile=0x344) returned 0x1 [0144.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.215] GetFileType (hFile=0x344) returned 0x1 [0144.215] WriteFile (in: hFile=0x344, lpBuffer=0x128ae3a8*, nNumberOfBytesToWrite=0x151a0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x128ae3a8*, lpNumberOfBytesWritten=0x12dc98*=0x151a0, lpOverlapped=0x0) returned 1 [0144.219] CloseHandle (hObject=0x344) returned 1 [0144.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx", lpFilePart=0x0) returned 0x48 [0144.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx.SYMMYWARE", lpFilePart=0x0) returned 0x52 [0144.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a3194c0, ftCreationTime.dwHighDateTime=0x1d5ddb2, ftLastAccessTime.dwLowDateTime=0x2711f320, ftLastAccessTime.dwHighDateTime=0x1d5dca5, ftLastWriteTime.dwLowDateTime=0x44344c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x151a0)) returned 1 [0144.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.219] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\aaUQ h40W9MZHs6O4Y.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\aauq h40w9mzhs6o4y.docx.symmyware")) returned 1 [0144.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", lpFilePart=0x0) returned 0x39 [0144.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.221] GetFileType (hFile=0x344) returned 0x1 [0144.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.221] GetFileType (hFile=0x344) returned 0x1 [0144.221] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x11011 [0144.222] ReadFile (in: hFile=0x344, lpBuffer=0x275e1c0, nNumberOfBytesToRead=0x11011, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x275e1c0*, lpNumberOfBytesRead=0x12dc38*=0x11011, lpOverlapped=0x0) returned 1 [0144.224] CloseHandle (hObject=0x344) returned 1 [0144.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", lpFilePart=0x0) returned 0x39 [0144.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.234] GetFileType (hFile=0x344) returned 0x1 [0144.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.234] GetFileType (hFile=0x344) returned 0x1 [0144.234] WriteFile (in: hFile=0x344, lpBuffer=0x27f2740*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x27f2740*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.236] CloseHandle (hObject=0x344) returned 1 [0144.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", lpFilePart=0x0) returned 0x39 [0144.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.239] GetFileType (hFile=0x344) returned 0x1 [0144.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.239] GetFileType (hFile=0x344) returned 0x1 [0144.239] WriteFile (in: hFile=0x344, lpBuffer=0x27e00c0*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x27e00c0*, lpNumberOfBytesWritten=0x12dc98*=0x11020, lpOverlapped=0x0) returned 1 [0144.241] CloseHandle (hObject=0x344) returned 1 [0144.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi", lpFilePart=0x0) returned 0x39 [0144.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi.SYMMYWARE", lpFilePart=0x0) returned 0x43 [0144.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49b7d610, ftCreationTime.dwHighDateTime=0x1d5d822, ftLastAccessTime.dwLowDateTime=0x5c6794a0, ftLastAccessTime.dwHighDateTime=0x1d5e0cc, ftLastWriteTime.dwLowDateTime=0x446a020, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11020)) returned 1 [0144.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\cS5B.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cs5b.avi.symmyware")) returned 1 [0144.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", lpFilePart=0x0) returned 0x3d [0144.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.244] GetFileType (hFile=0x344) returned 0x1 [0144.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.244] GetFileType (hFile=0x344) returned 0x1 [0144.244] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x9f9b [0144.245] ReadFile (in: hFile=0x344, lpBuffer=0x27f3c18, nNumberOfBytesToRead=0x9f9b, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27f3c18*, lpNumberOfBytesRead=0x12dc38*=0x9f9b, lpOverlapped=0x0) returned 1 [0144.246] CloseHandle (hObject=0x344) returned 1 [0144.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", lpFilePart=0x0) returned 0x3d [0144.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0144.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.256] GetFileType (hFile=0x344) returned 0x1 [0144.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0144.256] GetFileType (hFile=0x344) returned 0x1 [0144.257] WriteFile (in: hFile=0x344, lpBuffer=0x287fee0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x287fee0*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0144.258] CloseHandle (hObject=0x344) returned 1 [0144.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", lpFilePart=0x0) returned 0x3d [0144.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.259] GetFileType (hFile=0x344) returned 0x1 [0144.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0144.259] GetFileType (hFile=0x344) returned 0x1 [0144.259] WriteFile (in: hFile=0x344, lpBuffer=0x28748d0*, nNumberOfBytesToWrite=0x9fa0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x28748d0*, lpNumberOfBytesWritten=0x12dc98*=0x9fa0, lpOverlapped=0x0) returned 1 [0144.262] CloseHandle (hObject=0x344) returned 1 [0144.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi", lpFilePart=0x0) returned 0x3d [0144.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0144.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1d7d500, ftCreationTime.dwHighDateTime=0x1d5d8bb, ftLastAccessTime.dwLowDateTime=0xd2a2bae0, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0x4498650, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9fa0)) returned 1 [0144.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0144.263] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dz56hlsr.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dz56hlsr.avi.symmyware")) returned 1 [0144.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0144.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0144.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a4b0) returned 1 [0144.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0144.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0144.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.274] GetFileType (hFile=0x344) returned 0x1 [0144.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0144.274] GetFileType (hFile=0x344) returned 0x1 [0144.275] WriteFile (in: hFile=0x344, lpBuffer=0x28840a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x28840a0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.276] CloseHandle (hObject=0x344) returned 1 [0144.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x44 [0144.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x45 [0144.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0144.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0144.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0144.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0144.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.282] GetFileType (hFile=0x344) returned 0x1 [0144.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0144.282] GetFileType (hFile=0x344) returned 0x1 [0144.283] WriteFile (in: hFile=0x344, lpBuffer=0x2888928*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2888928*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.285] CloseHandle (hObject=0x344) returned 1 [0144.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0144.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0144.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.286] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0144.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0144.287] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.288] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0144.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0144.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.289] GetFileType (hFile=0x344) returned 0x1 [0144.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0144.289] GetFileType (hFile=0x344) returned 0x1 [0144.290] WriteFile (in: hFile=0x344, lpBuffer=0x288da30*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x288da30*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.292] CloseHandle (hObject=0x344) returned 1 [0144.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0144.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0144.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.293] GetFileType (hFile=0x344) returned 0x1 [0144.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0144.293] GetFileType (hFile=0x344) returned 0x1 [0144.293] WriteFile (in: hFile=0x344, lpBuffer=0x2890cc8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2890cc8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0144.294] CloseHandle (hObject=0x344) returned 1 [0144.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0144.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0144.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0144.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0144.298] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0144.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0144.299] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0144.299] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0144.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0144.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0144.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0144.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0144.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0144.300] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0144.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0144.301] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.301] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0144.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0144.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0144.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0144.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0144.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0144.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0144.322] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0144.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0144.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0144.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0144.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.325] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0144.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0144.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.326] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.327] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0144.327] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0144.327] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0144.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0144.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.329] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0144.330] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.330] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0144.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0144.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0144.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0144.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0144.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0144.338] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0144.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0144.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0144.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0144.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0144.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.344] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0144.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0144.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.349] GetFileType (hFile=0x344) returned 0x1 [0144.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0144.350] GetFileType (hFile=0x344) returned 0x1 [0144.350] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0xa5ff [0144.350] ReadFile (in: hFile=0x344, lpBuffer=0x289b9c0, nNumberOfBytesToRead=0xa5ff, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x289b9c0*, lpNumberOfBytesRead=0x12db38*=0xa5ff, lpOverlapped=0x0) returned 1 [0144.353] CloseHandle (hObject=0x344) returned 1 [0144.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0144.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0144.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.667] GetFileType (hFile=0x344) returned 0x1 [0144.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0144.668] GetFileType (hFile=0x344) returned 0x1 [0144.668] WriteFile (in: hFile=0x344, lpBuffer=0x27317a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x27317a0*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0144.670] CloseHandle (hObject=0x344) returned 1 [0144.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0144.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0144.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0144.671] GetFileType (hFile=0x344) returned 0x1 [0144.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0144.672] GetFileType (hFile=0x344) returned 0x1 [0144.672] WriteFile (in: hFile=0x344, lpBuffer=0x2725b08*, nNumberOfBytesToWrite=0xa600, lpNumberOfBytesWritten=0x12db98, lpOverlapped=0x0 | out: lpBuffer=0x2725b08*, lpNumberOfBytesWritten=0x12db98*=0xa600, lpOverlapped=0x0) returned 1 [0144.674] CloseHandle (hObject=0x344) returned 1 [0144.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0144.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0144.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x485cc00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0144.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0144.675] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.symmyware")) returned 1 [0144.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0144.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0144.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.685] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0144.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0144.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.686] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.687] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.687] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x56 [0144.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0144.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.710] GetFileType (hFile=0x344) returned 0x1 [0144.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0144.711] GetFileType (hFile=0x344) returned 0x1 [0144.711] WriteFile (in: hFile=0x344, lpBuffer=0x2736fb0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2736fb0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0144.713] CloseHandle (hObject=0x344) returned 1 [0144.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0144.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0144.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.714] GetFileType (hFile=0x344) returned 0x1 [0144.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0144.715] GetFileType (hFile=0x344) returned 0x1 [0144.716] WriteFile (in: hFile=0x344, lpBuffer=0x273a298*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x273a298*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.717] CloseHandle (hObject=0x344) returned 1 [0144.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0144.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.718] GetFileType (hFile=0x344) returned 0x1 [0144.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.719] GetFileType (hFile=0x344) returned 0x1 [0144.719] WriteFile (in: hFile=0x344, lpBuffer=0x273d570*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x273d570*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0144.721] CloseHandle (hObject=0x344) returned 1 [0144.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0144.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0144.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.722] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0144.723] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0144.724] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0144.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0144.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.726] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0144.727] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.727] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0144.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0144.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.731] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.731] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0144.732] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0144.732] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0144.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0144.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.734] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0144.735] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.735] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0144.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0144.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.739] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0144.740] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0144.740] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0144.741] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0144.742] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0144.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0144.743] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0144.745] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0144.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0144.746] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0144.747] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0144.747] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0144.748] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0144.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0144.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.751] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0144.752] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0144.753] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0144.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0144.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0144.754] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0144.755] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0144.756] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.757] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0144.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0144.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.760] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.761] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0144.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0144.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.762] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.763] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.763] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.764] GetFileType (hFile=0x344) returned 0x1 [0144.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.765] GetFileType (hFile=0x344) returned 0x1 [0144.765] WriteFile (in: hFile=0x344, lpBuffer=0x274e2a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x274e2a8*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.767] CloseHandle (hObject=0x344) returned 1 [0144.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0144.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0144.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.770] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.770] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0144.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0144.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.771] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.772] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.772] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.773] GetFileType (hFile=0x344) returned 0x1 [0144.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.773] GetFileType (hFile=0x344) returned 0x1 [0144.774] WriteFile (in: hFile=0x344, lpBuffer=0x2753e50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2753e50*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.776] CloseHandle (hObject=0x344) returned 1 [0144.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0144.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0144.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.777] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.778] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.778] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0144.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0144.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.779] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.781] GetFileType (hFile=0x344) returned 0x1 [0144.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.781] GetFileType (hFile=0x344) returned 0x1 [0144.782] WriteFile (in: hFile=0x344, lpBuffer=0x27599f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x27599f8*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.784] CloseHandle (hObject=0x344) returned 1 [0144.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0144.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0144.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.785] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.786] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.786] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0144.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0144.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.787] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.788] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.788] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.789] GetFileType (hFile=0x344) returned 0x1 [0144.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.790] GetFileType (hFile=0x344) returned 0x1 [0144.790] WriteFile (in: hFile=0x344, lpBuffer=0x275f5a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x275f5a0*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.792] CloseHandle (hObject=0x344) returned 1 [0144.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0144.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0144.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.793] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.793] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0144.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0144.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.795] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.795] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.797] GetFileType (hFile=0x344) returned 0x1 [0144.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.797] GetFileType (hFile=0x344) returned 0x1 [0144.798] WriteFile (in: hFile=0x344, lpBuffer=0x2765148*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2765148*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.799] CloseHandle (hObject=0x344) returned 1 [0144.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0144.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0144.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.802] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0144.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0144.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.804] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.808] WriteFile (in: hFile=0x344, lpBuffer=0x276acf0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x276acf0*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0144.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0144.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.812] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.812] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0144.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0144.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.813] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.813] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.814] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.815] WriteFile (in: hFile=0x344, lpBuffer=0x2770898*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2770898*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0144.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0144.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0144.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.821] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0144.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0144.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.823] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0144.827] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0144.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.828] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.828] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.828] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0144.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0144.829] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.829] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.829] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.829] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0144.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0144.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.833] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.833] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0144.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0144.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.834] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.834] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0144.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0144.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.838] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.838] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0144.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0144.839] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.839] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.840] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.840] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0144.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0144.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.844] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.844] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0144.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0144.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.845] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.846] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.846] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0144.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0144.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.851] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.851] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.852] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0144.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0144.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0144.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.852] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.853] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0144.853] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0144.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0144.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x77 [0144.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0144.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0144.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x73 [0144.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0144.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0144.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5b [0144.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0144.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0144.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0144.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0144.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0144.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0144.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0144.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0144.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0144.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0144.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0144.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0144.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0144.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0144.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0144.870] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0144.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0144.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0144.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0144.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0144.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.872] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0144.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0144.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0144.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0144.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0144.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0144.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0144.873] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0144.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0144.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0144.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0144.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.874] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0144.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0144.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.875] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0144.876] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0144.877] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0144.878] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0144.879] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0144.880] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0144.881] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.881] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0144.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0144.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0144.882] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0144.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0144.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0144.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0144.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0144.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0144.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0144.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0144.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0144.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0144.888] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0144.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0144.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0144.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0144.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0144.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0144.892] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0144.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0144.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0144.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0144.894] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0144.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0144.895] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.895] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0144.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0144.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0144.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0144.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0144.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0144.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.903] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0144.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0144.904] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.904] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0144.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0144.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0144.907] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.907] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0144.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0144.908] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.908] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0144.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0144.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0144.911] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.912] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0144.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0144.913] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.913] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0144.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0144.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0144.916] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.916] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0144.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0144.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.918] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0144.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0144.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0144.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0144.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.923] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0144.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0144.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0144.924] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.924] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0144.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0144.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0144.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0144.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.925] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0144.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0144.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0144.926] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.926] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0144.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0144.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0144.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0144.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.927] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0144.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0144.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0144.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0144.928] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0144.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0144.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0144.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0144.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0144.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0144.931] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xd [0145.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0145.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0145.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.008] GetFileType (hFile=0x344) returned 0x1 [0145.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0145.009] GetFileType (hFile=0x344) returned 0x1 [0145.009] WriteFile (in: hFile=0x344, lpBuffer=0x2855888*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x2855888*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0145.010] CloseHandle (hObject=0x344) returned 1 [0145.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0145.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0145.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.013] GetFileType (hFile=0x344) returned 0x1 [0145.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0145.013] GetFileType (hFile=0x344) returned 0x1 [0145.013] WriteFile (in: hFile=0x344, lpBuffer=0x2856a78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x2856a78*, lpNumberOfBytesWritten=0x12d9c8*=0x10, lpOverlapped=0x0) returned 1 [0145.015] CloseHandle (hObject=0x344) returned 1 [0145.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0145.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.SYMMYWARE", lpFilePart=0x0) returned 0x7e [0145.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0145.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4b3e0e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0145.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0145.016] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.symmyware")) returned 1 [0145.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0145.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0145.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.019] GetFileType (hFile=0x344) returned 0x1 [0145.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0145.019] GetFileType (hFile=0x344) returned 0x1 [0145.020] WriteFile (in: hFile=0x344, lpBuffer=0x285a0b0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x285a0b0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.022] CloseHandle (hObject=0x344) returned 1 [0145.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0145.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0145.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.028] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0145.028] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.029] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0145.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0145.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0145.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0145.032] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0145.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0145.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.035] GetFileType (hFile=0x344) returned 0x1 [0145.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0145.035] GetFileType (hFile=0x344) returned 0x1 [0145.036] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xd [0145.036] ReadFile (in: hFile=0x344, lpBuffer=0x285dea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x285dea8*, lpNumberOfBytesRead=0x12dab8*=0xd, lpOverlapped=0x0) returned 1 [0145.037] CloseHandle (hObject=0x344) returned 1 [0145.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0145.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0145.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.113] GetFileType (hFile=0x344) returned 0x1 [0145.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0145.114] GetFileType (hFile=0x344) returned 0x1 [0145.114] WriteFile (in: hFile=0x344, lpBuffer=0x28af538*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x28af538*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0145.115] CloseHandle (hObject=0x344) returned 1 [0145.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0145.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0145.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.117] GetFileType (hFile=0x344) returned 0x1 [0145.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0145.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.SYMMYWARE", lpFilePart=0x0) returned 0x78 [0145.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4c12750, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0145.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.symmyware")) returned 1 [0145.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0145.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.122] GetFileType (hFile=0x344) returned 0x1 [0145.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0145.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0145.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.127] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0145.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0145.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.129] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0145.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.131] GetFileType (hFile=0x344) returned 0x1 [0145.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0145.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0145.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.133] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.134] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0145.134] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.134] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0145.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0145.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.136] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0145.137] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0 [0145.137] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0145.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.139] GetFileType (hFile=0x344) returned 0x1 [0145.140] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0x344 [0145.140] ReadFile (in: hFile=0x344, lpBuffer=0x28bd6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x28bd6f8*, lpNumberOfBytesRead=0x12dab8*=0x344, lpOverlapped=0x0) returned 1 [0145.161] CloseHandle (hObject=0x344) returned 1 [0145.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0145.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.175] GetFileType (hFile=0x344) returned 0x1 [0145.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0145.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.178] GetFileType (hFile=0x344) returned 0x1 [0145.187] WriteFile (in: hFile=0x344, lpBuffer=0x26fc708*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x26fc708*, lpNumberOfBytesWritten=0x12d9c8*=0x350, lpOverlapped=0x0) returned 1 [0145.188] CloseHandle (hObject=0x344) returned 1 [0145.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0145.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.SYMMYWARE", lpFilePart=0x0) returned 0x75 [0145.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0145.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4ca7620, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0145.189] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.symmyware")) returned 1 [0145.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0145.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0145.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.191] GetFileType (hFile=0x344) returned 0x1 [0145.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0145.191] GetFileType (hFile=0x344) returned 0x1 [0145.192] WriteFile (in: hFile=0x344, lpBuffer=0x26ffd08*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x26ffd08*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.194] CloseHandle (hObject=0x344) returned 1 [0145.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0145.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0145.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.199] GetFileType (hFile=0x344) returned 0x1 [0145.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0145.200] GetFileType (hFile=0x344) returned 0x1 [0145.201] WriteFile (in: hFile=0x344, lpBuffer=0x2703040*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2703040*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.203] CloseHandle (hObject=0x344) returned 1 [0145.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0145.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0145.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.205] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.206] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.207] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0145.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0145.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0145.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0145.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.212] GetFileType (hFile=0x344) returned 0x1 [0145.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0145.213] GetFileType (hFile=0x344) returned 0x1 [0145.215] WriteFile (in: hFile=0x344, lpBuffer=0x2708748*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2708748*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.217] CloseHandle (hObject=0x344) returned 1 [0145.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0145.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0145.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.218] GetFileType (hFile=0x344) returned 0x1 [0145.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0145.218] GetFileType (hFile=0x344) returned 0x1 [0145.220] WriteFile (in: hFile=0x344, lpBuffer=0x270ba60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x270ba60*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.222] CloseHandle (hObject=0x344) returned 1 [0145.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0145.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0145.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.223] GetFileType (hFile=0x344) returned 0x1 [0145.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0145.224] GetFileType (hFile=0x344) returned 0x1 [0145.225] WriteFile (in: hFile=0x344, lpBuffer=0x270ed28*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x270ed28*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.226] CloseHandle (hObject=0x344) returned 1 [0145.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0145.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0145.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0145.232] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0145.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0145.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0145.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0145.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.235] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0145.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0145.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0145.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0145.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0145.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0145.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0145.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0145.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0145.240] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0145.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0145.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0145.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0145.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0145.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0145.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0145.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0145.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.244] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0145.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0145.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0145.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0145.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.248] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0145.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0145.249] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.250] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0145.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0145.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0145.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0145.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0145.254] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0145.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0145.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.255] GetFileType (hFile=0x344) returned 0x1 [0145.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0145.255] GetFileType (hFile=0x344) returned 0x1 [0145.256] WriteFile (in: hFile=0x344, lpBuffer=0x2719008*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2719008*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.257] CloseHandle (hObject=0x344) returned 1 [0145.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0145.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0145.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0145.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0145.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0145.263] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0145.264] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0145.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0145.265] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.265] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0145.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0145.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0145.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.268] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0145.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0145.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.272] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0145.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.274] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.274] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.275] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0145.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0145.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0145.281] WriteFile (in: hFile=0x344, lpBuffer=0x2721278*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2721278*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0145.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0145.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.285] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0145.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0145.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0145.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0145.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0145.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.288] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.289] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0145.289] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.290] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0145.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0145.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0145.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0145.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0145.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.292] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.293] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.293] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0145.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0145.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0145.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0145.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0145.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.295] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.295] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.295] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0145.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0145.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0145.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0145.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0145.299] WriteFile (in: hFile=0x344, lpBuffer=0x2728c20*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2728c20*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x54 [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0145.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0145.303] WriteFile (in: hFile=0x344, lpBuffer=0x272bf28*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x272bf28*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0145.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0145.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0145.309] WriteFile (in: hFile=0x344, lpBuffer=0x272f220*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x272f220*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0145.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0145.313] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0145.314] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0145.315] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.315] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0145.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.316] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0145.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0145.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0145.318] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0145.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0145.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0145.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0145.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0145.322] WriteFile (in: hFile=0x344, lpBuffer=0x2734ed0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2734ed0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0145.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0145.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0145.329] WriteFile (in: hFile=0x344, lpBuffer=0x2738198*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2738198*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0145.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x40 [0145.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0145.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0145.333] WriteFile (in: hFile=0x344, lpBuffer=0x273b450*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x273b450*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0145.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0145.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0145.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0145.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0145.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0145.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0145.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3fd5d360, ftCreationTime.dwHighDateTime=0x1d5dc2b, ftLastAccessTime.dwLowDateTime=0x3891c0e0, ftLastAccessTime.dwHighDateTime=0x1d5da51, ftLastWriteTime.dwLowDateTime=0x3891c0e0, ftLastWriteTime.dwHighDateTime=0x1d5da51, nFileSizeHigh=0x0, nFileSizeLow=0xdf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="1F2Xy8fwh.odt", cAlternateFileName="1F2XY8~1.ODT")) returned 1 [0145.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcecd9fc0, ftCreationTime.dwHighDateTime=0x1d5d9e8, ftLastAccessTime.dwLowDateTime=0xd6546010, ftLastAccessTime.dwHighDateTime=0x1d5e6c4, ftLastWriteTime.dwLowDateTime=0xd6546010, ftLastWriteTime.dwHighDateTime=0x1d5e6c4, nFileSizeHigh=0x0, nFileSizeLow=0x387e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Dxrms6t2OI6J.wav", cAlternateFileName="2DXRMS~1.WAV")) returned 1 [0145.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9a970, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0xfe484570, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0xfe484570, ftLastWriteTime.dwHighDateTime=0x1d5ddc6, nFileSizeHigh=0x0, nFileSizeLow=0xc1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MbyUMHaUw9Yc76.flv", cAlternateFileName="4MBYUM~1.FLV")) returned 1 [0145.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacaecc50, ftCreationTime.dwHighDateTime=0x1d5e5ac, ftLastAccessTime.dwLowDateTime=0xb0222420, ftLastAccessTime.dwHighDateTime=0x1d5dbc7, ftLastWriteTime.dwLowDateTime=0xb0222420, ftLastWriteTime.dwHighDateTime=0x1d5dbc7, nFileSizeHigh=0x0, nFileSizeLow=0x3332, dwReserved0=0x0, dwReserved1=0x0, cFileName="52_9XN w.avi", cAlternateFileName="52_9XN~1.AVI")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2076790, ftCreationTime.dwHighDateTime=0x1d5e48f, ftLastAccessTime.dwLowDateTime=0xf9f1a7e0, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0xf9f1a7e0, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0xc51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="6flbF.wav", cAlternateFileName="")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6910a700, ftCreationTime.dwHighDateTime=0x1d5dc49, ftLastAccessTime.dwLowDateTime=0x68062180, ftLastAccessTime.dwHighDateTime=0x1d5df8e, ftLastWriteTime.dwLowDateTime=0x68062180, ftLastWriteTime.dwHighDateTime=0x1d5df8e, nFileSizeHigh=0x0, nFileSizeLow=0x787f, dwReserved0=0x0, dwReserved1=0x0, cFileName="7hk0dg.bmp", cAlternateFileName="")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0145.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e2c5b70, ftCreationTime.dwHighDateTime=0x1d5e4ff, ftLastAccessTime.dwLowDateTime=0x15144de0, ftLastAccessTime.dwHighDateTime=0x1d5e02d, ftLastWriteTime.dwLowDateTime=0x15144de0, ftLastWriteTime.dwHighDateTime=0x1d5e02d, nFileSizeHigh=0x0, nFileSizeLow=0x11fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqnarxxuyMZ0XOv.jpg", cAlternateFileName="AQNARX~1.JPG")) returned 1 [0145.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf88ebbc0, ftCreationTime.dwHighDateTime=0x1d5e198, ftLastAccessTime.dwLowDateTime=0xd94df3b0, ftLastAccessTime.dwHighDateTime=0x1d5e324, ftLastWriteTime.dwLowDateTime=0xd94df3b0, ftLastWriteTime.dwHighDateTime=0x1d5e324, nFileSizeHigh=0x0, nFileSizeLow=0x3955, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1EBUJ LFTVN-dRE02w9.m4a", cAlternateFileName="B1EBUJ~1.M4A")) returned 1 [0145.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x932683d0, ftCreationTime.dwHighDateTime=0x1d5df45, ftLastAccessTime.dwLowDateTime=0x3f56e470, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x3f56e470, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x76c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BJPssD9yrqIBrhKg8d.flv", cAlternateFileName="BJPSSD~1.FLV")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ff3f080, ftCreationTime.dwHighDateTime=0x1d5e5cc, ftLastAccessTime.dwLowDateTime=0x5250a090, ftLastAccessTime.dwHighDateTime=0x1d5de85, ftLastWriteTime.dwLowDateTime=0x5250a090, ftLastWriteTime.dwHighDateTime=0x1d5de85, nFileSizeHigh=0x0, nFileSizeLow=0xb790, dwReserved0=0x0, dwReserved1=0x0, cFileName="blm8.mp3", cAlternateFileName="")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc0ced720, ftCreationTime.dwHighDateTime=0x1d5d936, ftLastAccessTime.dwLowDateTime=0x805288a0, ftLastAccessTime.dwHighDateTime=0x1d5e155, ftLastWriteTime.dwLowDateTime=0x805288a0, ftLastWriteTime.dwHighDateTime=0x1d5e155, nFileSizeHigh=0x0, nFileSizeLow=0xd409, dwReserved0=0x0, dwReserved1=0x0, cFileName="bssEB1.ods", cAlternateFileName="")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f42e2b0, ftCreationTime.dwHighDateTime=0x1d5e4ff, ftLastAccessTime.dwLowDateTime=0xfd9f0fb0, ftLastAccessTime.dwHighDateTime=0x1d5dbae, ftLastWriteTime.dwLowDateTime=0xfd9f0fb0, ftLastWriteTime.dwHighDateTime=0x1d5dbae, nFileSizeHigh=0x0, nFileSizeLow=0x136e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="byHGLhzy9JWQ5.mp3", cAlternateFileName="BYHGLH~1.MP3")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba7408a0, ftCreationTime.dwHighDateTime=0x1d5e601, ftLastAccessTime.dwLowDateTime=0x723ba320, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0x723ba320, ftLastWriteTime.dwHighDateTime=0x1d5e0ae, nFileSizeHigh=0x0, nFileSizeLow=0x2cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClRZkTs-zR.png", cAlternateFileName="CLRZKT~1.PNG")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d7cbe90, ftCreationTime.dwHighDateTime=0x1d5db5c, ftLastAccessTime.dwLowDateTime=0x2738ca90, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x2738ca90, ftLastWriteTime.dwHighDateTime=0x1d5d9bc, nFileSizeHigh=0x0, nFileSizeLow=0x2827, dwReserved0=0x0, dwReserved1=0x0, cFileName="DaxfbjZ_-JX.pptx", cAlternateFileName="DAXFBJ~1.PPT")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35983720, ftCreationTime.dwHighDateTime=0x1d5dc9a, ftLastAccessTime.dwLowDateTime=0x8504e700, ftLastAccessTime.dwHighDateTime=0x1d5e31f, ftLastWriteTime.dwLowDateTime=0x8504e700, ftLastWriteTime.dwHighDateTime=0x1d5e31f, nFileSizeHigh=0x0, nFileSizeLow=0xc162, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFVaQrHkWIqXCr_.gif", cAlternateFileName="DFVAQR~1.GIF")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf73bbcc0, ftCreationTime.dwHighDateTime=0x1d5db33, ftLastAccessTime.dwLowDateTime=0x38c2a020, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x38c2a020, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x5c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DXob1PIuEKEgUsu.jpg", cAlternateFileName="DXOB1P~1.JPG")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59195f0, ftCreationTime.dwHighDateTime=0x1d5e7e2, ftLastAccessTime.dwLowDateTime=0xcc6fe400, ftLastAccessTime.dwHighDateTime=0x1d5dc35, ftLastWriteTime.dwLowDateTime=0xcc6fe400, ftLastWriteTime.dwHighDateTime=0x1d5dc35, nFileSizeHigh=0x0, nFileSizeLow=0x31b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBB8xQf.wav", cAlternateFileName="")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18dd6d40, ftCreationTime.dwHighDateTime=0x1d5df50, ftLastAccessTime.dwLowDateTime=0x4f0da120, ftLastAccessTime.dwHighDateTime=0x1d5d80f, ftLastWriteTime.dwLowDateTime=0x4f0da120, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0xe6fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="esyAsmf-izw8n0fDv.jpg", cAlternateFileName="ESYASM~1.JPG")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93c82e0, ftCreationTime.dwHighDateTime=0x1d5e2bb, ftLastAccessTime.dwLowDateTime=0xf5faef40, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0xf5faef40, ftLastWriteTime.dwHighDateTime=0x1d5dfdc, nFileSizeHigh=0x0, nFileSizeLow=0xa5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0UK3.csv", cAlternateFileName="")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f55b430, ftCreationTime.dwHighDateTime=0x1d5df42, ftLastAccessTime.dwLowDateTime=0x43122c30, ftLastAccessTime.dwHighDateTime=0x1d5e54b, ftLastWriteTime.dwLowDateTime=0x43122c30, ftLastWriteTime.dwHighDateTime=0x1d5e54b, nFileSizeHigh=0x0, nFileSizeLow=0xfad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="j3pEDx2.gif", cAlternateFileName="")) returned 1 [0145.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7041ced0, ftCreationTime.dwHighDateTime=0x1d5dd54, ftLastAccessTime.dwLowDateTime=0x9e9bd5d0, ftLastAccessTime.dwHighDateTime=0x1d5e5b2, ftLastWriteTime.dwLowDateTime=0x9e9bd5d0, ftLastWriteTime.dwHighDateTime=0x1d5e5b2, nFileSizeHigh=0x0, nFileSizeLow=0x1055, dwReserved0=0x0, dwReserved1=0x0, cFileName="LdIcJpL_TH0aL.bmp", cAlternateFileName="LDICJP~1.BMP")) returned 1 [0145.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0145.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa951cf10, ftCreationTime.dwHighDateTime=0x1d5dabe, ftLastAccessTime.dwLowDateTime=0xe5724620, ftLastAccessTime.dwHighDateTime=0x1d5e309, ftLastWriteTime.dwLowDateTime=0xe5724620, ftLastWriteTime.dwHighDateTime=0x1d5e309, nFileSizeHigh=0x0, nFileSizeLow=0x1821, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCg1yGMfXj9cGug-jd.mp3", cAlternateFileName="MCG1YG~1.MP3")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2913ea0, ftCreationTime.dwHighDateTime=0x1d5e3ab, ftLastAccessTime.dwLowDateTime=0x22a7fb10, ftLastAccessTime.dwHighDateTime=0x1d5e04f, ftLastWriteTime.dwLowDateTime=0x22a7fb10, ftLastWriteTime.dwHighDateTime=0x1d5e04f, nFileSizeHigh=0x0, nFileSizeLow=0xb765, dwReserved0=0x0, dwReserved1=0x0, cFileName="mhW R.swf", cAlternateFileName="MHWR~1.SWF")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0145.348] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7c45aa0, ftCreationTime.dwHighDateTime=0x1d5d85b, ftLastAccessTime.dwLowDateTime=0xd1ee81e0, ftLastAccessTime.dwHighDateTime=0x1d5e5e8, ftLastWriteTime.dwLowDateTime=0xd1ee81e0, ftLastWriteTime.dwHighDateTime=0x1d5e5e8, nFileSizeHigh=0x0, nFileSizeLow=0x160b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="oXj TgJAxHC5u7H.gif", cAlternateFileName="OXJTGJ~1.GIF")) returned 1 [0145.349] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca79600, ftCreationTime.dwHighDateTime=0x1d5e498, ftLastAccessTime.dwLowDateTime=0x46180460, ftLastAccessTime.dwHighDateTime=0x1d5e3e6, ftLastWriteTime.dwLowDateTime=0x46180460, ftLastWriteTime.dwHighDateTime=0x1d5e3e6, nFileSizeHigh=0x0, nFileSizeLow=0x8ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7WLWid.xlsx", cAlternateFileName="P7WLWI~1.XLS")) returned 1 [0145.349] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd245b7e0, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0x9d5ff10, ftLastAccessTime.dwHighDateTime=0x1d5e18f, ftLastWriteTime.dwLowDateTime=0x9d5ff10, ftLastWriteTime.dwHighDateTime=0x1d5e18f, nFileSizeHigh=0x0, nFileSizeLow=0xca55, dwReserved0=0x0, dwReserved1=0x0, cFileName="sVCKRBV obnju7N7U.swf", cAlternateFileName="SVCKRB~1.SWF")) returned 1 [0145.349] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48407120, ftCreationTime.dwHighDateTime=0x1d5dd2c, ftLastAccessTime.dwLowDateTime=0x47a90830, ftLastAccessTime.dwHighDateTime=0x1d5da70, ftLastWriteTime.dwLowDateTime=0x47a90830, ftLastWriteTime.dwHighDateTime=0x1d5da70, nFileSizeHigh=0x0, nFileSizeLow=0x65bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="tv2ywfH8ElIL9r.mp3", cAlternateFileName="TV2YWF~1.MP3")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ba94750, ftCreationTime.dwHighDateTime=0x1d5e7a2, ftLastAccessTime.dwLowDateTime=0x8c20f700, ftLastAccessTime.dwHighDateTime=0x1d5e6d9, ftLastWriteTime.dwLowDateTime=0x8c20f700, ftLastWriteTime.dwHighDateTime=0x1d5e6d9, nFileSizeHigh=0x0, nFileSizeLow=0x6ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="tyuwhl4i54TZgqIIHN.pptx", cAlternateFileName="TYUWHL~1.PPT")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa305b420, ftCreationTime.dwHighDateTime=0x1d5e287, ftLastAccessTime.dwLowDateTime=0xd05035f0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0xd05035f0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0xb227, dwReserved0=0x0, dwReserved1=0x0, cFileName="wVgeXuZ900.mp3", cAlternateFileName="WVGEXU~1.MP3")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c8b0c90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0xcf2c41f0, ftLastAccessTime.dwHighDateTime=0x1d5e556, ftLastWriteTime.dwLowDateTime=0xcf2c41f0, ftLastWriteTime.dwHighDateTime=0x1d5e556, nFileSizeHigh=0x0, nFileSizeLow=0xa7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="YYHvYCDfIlq.gif", cAlternateFileName="YYHVYC~1.GIF")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca625880, ftCreationTime.dwHighDateTime=0x1d5df9d, ftLastAccessTime.dwLowDateTime=0xe085eb00, ftLastAccessTime.dwHighDateTime=0x1d5ded9, ftLastWriteTime.dwLowDateTime=0xe085eb00, ftLastWriteTime.dwHighDateTime=0x1d5ded9, nFileSizeHigh=0x0, nFileSizeLow=0x8461, dwReserved0=0x0, dwReserved1=0x0, cFileName="zTFWlb2IXyJjf.wav", cAlternateFileName="ZTFWLB~1.WAV")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0145.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0145.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0145.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0145.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0145.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0145.352] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb481b40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb481b40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3fd5d360, ftCreationTime.dwHighDateTime=0x1d5dc2b, ftLastAccessTime.dwLowDateTime=0x3891c0e0, ftLastAccessTime.dwHighDateTime=0x1d5da51, ftLastWriteTime.dwLowDateTime=0x3891c0e0, ftLastWriteTime.dwHighDateTime=0x1d5da51, nFileSizeHigh=0x0, nFileSizeLow=0xdf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="1F2Xy8fwh.odt", cAlternateFileName="1F2XY8~1.ODT")) returned 1 [0145.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcecd9fc0, ftCreationTime.dwHighDateTime=0x1d5d9e8, ftLastAccessTime.dwLowDateTime=0xd6546010, ftLastAccessTime.dwHighDateTime=0x1d5e6c4, ftLastWriteTime.dwLowDateTime=0xd6546010, ftLastWriteTime.dwHighDateTime=0x1d5e6c4, nFileSizeHigh=0x0, nFileSizeLow=0x387e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Dxrms6t2OI6J.wav", cAlternateFileName="2DXRMS~1.WAV")) returned 1 [0145.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9a970, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0xfe484570, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0xfe484570, ftLastWriteTime.dwHighDateTime=0x1d5ddc6, nFileSizeHigh=0x0, nFileSizeLow=0xc1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4MbyUMHaUw9Yc76.flv", cAlternateFileName="4MBYUM~1.FLV")) returned 1 [0145.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacaecc50, ftCreationTime.dwHighDateTime=0x1d5e5ac, ftLastAccessTime.dwLowDateTime=0xb0222420, ftLastAccessTime.dwHighDateTime=0x1d5dbc7, ftLastWriteTime.dwLowDateTime=0xb0222420, ftLastWriteTime.dwHighDateTime=0x1d5dbc7, nFileSizeHigh=0x0, nFileSizeLow=0x3332, dwReserved0=0x0, dwReserved1=0x0, cFileName="52_9XN w.avi", cAlternateFileName="52_9XN~1.AVI")) returned 1 [0145.354] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2076790, ftCreationTime.dwHighDateTime=0x1d5e48f, ftLastAccessTime.dwLowDateTime=0xf9f1a7e0, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0xf9f1a7e0, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0xc51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="6flbF.wav", cAlternateFileName="")) returned 1 [0145.355] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6910a700, ftCreationTime.dwHighDateTime=0x1d5dc49, ftLastAccessTime.dwLowDateTime=0x68062180, ftLastAccessTime.dwHighDateTime=0x1d5df8e, ftLastWriteTime.dwLowDateTime=0x68062180, ftLastWriteTime.dwHighDateTime=0x1d5df8e, nFileSizeHigh=0x0, nFileSizeLow=0x787f, dwReserved0=0x0, dwReserved1=0x0, cFileName="7hk0dg.bmp", cAlternateFileName="")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e2c5b70, ftCreationTime.dwHighDateTime=0x1d5e4ff, ftLastAccessTime.dwLowDateTime=0x15144de0, ftLastAccessTime.dwHighDateTime=0x1d5e02d, ftLastWriteTime.dwLowDateTime=0x15144de0, ftLastWriteTime.dwHighDateTime=0x1d5e02d, nFileSizeHigh=0x0, nFileSizeLow=0x11fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqnarxxuyMZ0XOv.jpg", cAlternateFileName="AQNARX~1.JPG")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf88ebbc0, ftCreationTime.dwHighDateTime=0x1d5e198, ftLastAccessTime.dwLowDateTime=0xd94df3b0, ftLastAccessTime.dwHighDateTime=0x1d5e324, ftLastWriteTime.dwLowDateTime=0xd94df3b0, ftLastWriteTime.dwHighDateTime=0x1d5e324, nFileSizeHigh=0x0, nFileSizeLow=0x3955, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1EBUJ LFTVN-dRE02w9.m4a", cAlternateFileName="B1EBUJ~1.M4A")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x932683d0, ftCreationTime.dwHighDateTime=0x1d5df45, ftLastAccessTime.dwLowDateTime=0x3f56e470, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x3f56e470, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x76c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BJPssD9yrqIBrhKg8d.flv", cAlternateFileName="BJPSSD~1.FLV")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ff3f080, ftCreationTime.dwHighDateTime=0x1d5e5cc, ftLastAccessTime.dwLowDateTime=0x5250a090, ftLastAccessTime.dwHighDateTime=0x1d5de85, ftLastWriteTime.dwLowDateTime=0x5250a090, ftLastWriteTime.dwHighDateTime=0x1d5de85, nFileSizeHigh=0x0, nFileSizeLow=0xb790, dwReserved0=0x0, dwReserved1=0x0, cFileName="blm8.mp3", cAlternateFileName="")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc0ced720, ftCreationTime.dwHighDateTime=0x1d5d936, ftLastAccessTime.dwLowDateTime=0x805288a0, ftLastAccessTime.dwHighDateTime=0x1d5e155, ftLastWriteTime.dwLowDateTime=0x805288a0, ftLastWriteTime.dwHighDateTime=0x1d5e155, nFileSizeHigh=0x0, nFileSizeLow=0xd409, dwReserved0=0x0, dwReserved1=0x0, cFileName="bssEB1.ods", cAlternateFileName="")) returned 1 [0145.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f42e2b0, ftCreationTime.dwHighDateTime=0x1d5e4ff, ftLastAccessTime.dwLowDateTime=0xfd9f0fb0, ftLastAccessTime.dwHighDateTime=0x1d5dbae, ftLastWriteTime.dwLowDateTime=0xfd9f0fb0, ftLastWriteTime.dwHighDateTime=0x1d5dbae, nFileSizeHigh=0x0, nFileSizeLow=0x136e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="byHGLhzy9JWQ5.mp3", cAlternateFileName="BYHGLH~1.MP3")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba7408a0, ftCreationTime.dwHighDateTime=0x1d5e601, ftLastAccessTime.dwLowDateTime=0x723ba320, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0x723ba320, ftLastWriteTime.dwHighDateTime=0x1d5e0ae, nFileSizeHigh=0x0, nFileSizeLow=0x2cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClRZkTs-zR.png", cAlternateFileName="CLRZKT~1.PNG")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d7cbe90, ftCreationTime.dwHighDateTime=0x1d5db5c, ftLastAccessTime.dwLowDateTime=0x2738ca90, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x2738ca90, ftLastWriteTime.dwHighDateTime=0x1d5d9bc, nFileSizeHigh=0x0, nFileSizeLow=0x2827, dwReserved0=0x0, dwReserved1=0x0, cFileName="DaxfbjZ_-JX.pptx", cAlternateFileName="DAXFBJ~1.PPT")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35983720, ftCreationTime.dwHighDateTime=0x1d5dc9a, ftLastAccessTime.dwLowDateTime=0x8504e700, ftLastAccessTime.dwHighDateTime=0x1d5e31f, ftLastWriteTime.dwLowDateTime=0x8504e700, ftLastWriteTime.dwHighDateTime=0x1d5e31f, nFileSizeHigh=0x0, nFileSizeLow=0xc162, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFVaQrHkWIqXCr_.gif", cAlternateFileName="DFVAQR~1.GIF")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf73bbcc0, ftCreationTime.dwHighDateTime=0x1d5db33, ftLastAccessTime.dwLowDateTime=0x38c2a020, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x38c2a020, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x5c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DXob1PIuEKEgUsu.jpg", cAlternateFileName="DXOB1P~1.JPG")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59195f0, ftCreationTime.dwHighDateTime=0x1d5e7e2, ftLastAccessTime.dwLowDateTime=0xcc6fe400, ftLastAccessTime.dwHighDateTime=0x1d5dc35, ftLastWriteTime.dwLowDateTime=0xcc6fe400, ftLastWriteTime.dwHighDateTime=0x1d5dc35, nFileSizeHigh=0x0, nFileSizeLow=0x31b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBB8xQf.wav", cAlternateFileName="")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18dd6d40, ftCreationTime.dwHighDateTime=0x1d5df50, ftLastAccessTime.dwLowDateTime=0x4f0da120, ftLastAccessTime.dwHighDateTime=0x1d5d80f, ftLastWriteTime.dwLowDateTime=0x4f0da120, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0xe6fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="esyAsmf-izw8n0fDv.jpg", cAlternateFileName="ESYASM~1.JPG")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0145.357] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93c82e0, ftCreationTime.dwHighDateTime=0x1d5e2bb, ftLastAccessTime.dwLowDateTime=0xf5faef40, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0xf5faef40, ftLastWriteTime.dwHighDateTime=0x1d5dfdc, nFileSizeHigh=0x0, nFileSizeLow=0xa5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0UK3.csv", cAlternateFileName="")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f55b430, ftCreationTime.dwHighDateTime=0x1d5df42, ftLastAccessTime.dwLowDateTime=0x43122c30, ftLastAccessTime.dwHighDateTime=0x1d5e54b, ftLastWriteTime.dwLowDateTime=0x43122c30, ftLastWriteTime.dwHighDateTime=0x1d5e54b, nFileSizeHigh=0x0, nFileSizeLow=0xfad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="j3pEDx2.gif", cAlternateFileName="")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7041ced0, ftCreationTime.dwHighDateTime=0x1d5dd54, ftLastAccessTime.dwLowDateTime=0x9e9bd5d0, ftLastAccessTime.dwHighDateTime=0x1d5e5b2, ftLastWriteTime.dwLowDateTime=0x9e9bd5d0, ftLastWriteTime.dwHighDateTime=0x1d5e5b2, nFileSizeHigh=0x0, nFileSizeLow=0x1055, dwReserved0=0x0, dwReserved1=0x0, cFileName="LdIcJpL_TH0aL.bmp", cAlternateFileName="LDICJP~1.BMP")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa951cf10, ftCreationTime.dwHighDateTime=0x1d5dabe, ftLastAccessTime.dwLowDateTime=0xe5724620, ftLastAccessTime.dwHighDateTime=0x1d5e309, ftLastWriteTime.dwLowDateTime=0xe5724620, ftLastWriteTime.dwHighDateTime=0x1d5e309, nFileSizeHigh=0x0, nFileSizeLow=0x1821, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCg1yGMfXj9cGug-jd.mp3", cAlternateFileName="MCG1YG~1.MP3")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2913ea0, ftCreationTime.dwHighDateTime=0x1d5e3ab, ftLastAccessTime.dwLowDateTime=0x22a7fb10, ftLastAccessTime.dwHighDateTime=0x1d5e04f, ftLastWriteTime.dwLowDateTime=0x22a7fb10, ftLastWriteTime.dwHighDateTime=0x1d5e04f, nFileSizeHigh=0x0, nFileSizeLow=0xb765, dwReserved0=0x0, dwReserved1=0x0, cFileName="mhW R.swf", cAlternateFileName="MHWR~1.SWF")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7c45aa0, ftCreationTime.dwHighDateTime=0x1d5d85b, ftLastAccessTime.dwLowDateTime=0xd1ee81e0, ftLastAccessTime.dwHighDateTime=0x1d5e5e8, ftLastWriteTime.dwLowDateTime=0xd1ee81e0, ftLastWriteTime.dwHighDateTime=0x1d5e5e8, nFileSizeHigh=0x0, nFileSizeLow=0x160b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="oXj TgJAxHC5u7H.gif", cAlternateFileName="OXJTGJ~1.GIF")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca79600, ftCreationTime.dwHighDateTime=0x1d5e498, ftLastAccessTime.dwLowDateTime=0x46180460, ftLastAccessTime.dwHighDateTime=0x1d5e3e6, ftLastWriteTime.dwLowDateTime=0x46180460, ftLastWriteTime.dwHighDateTime=0x1d5e3e6, nFileSizeHigh=0x0, nFileSizeLow=0x8ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7WLWid.xlsx", cAlternateFileName="P7WLWI~1.XLS")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd245b7e0, ftCreationTime.dwHighDateTime=0x1d5e39e, ftLastAccessTime.dwLowDateTime=0x9d5ff10, ftLastAccessTime.dwHighDateTime=0x1d5e18f, ftLastWriteTime.dwLowDateTime=0x9d5ff10, ftLastWriteTime.dwHighDateTime=0x1d5e18f, nFileSizeHigh=0x0, nFileSizeLow=0xca55, dwReserved0=0x0, dwReserved1=0x0, cFileName="sVCKRBV obnju7N7U.swf", cAlternateFileName="SVCKRB~1.SWF")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48407120, ftCreationTime.dwHighDateTime=0x1d5dd2c, ftLastAccessTime.dwLowDateTime=0x47a90830, ftLastAccessTime.dwHighDateTime=0x1d5da70, ftLastWriteTime.dwLowDateTime=0x47a90830, ftLastWriteTime.dwHighDateTime=0x1d5da70, nFileSizeHigh=0x0, nFileSizeLow=0x65bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="tv2ywfH8ElIL9r.mp3", cAlternateFileName="TV2YWF~1.MP3")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ba94750, ftCreationTime.dwHighDateTime=0x1d5e7a2, ftLastAccessTime.dwLowDateTime=0x8c20f700, ftLastAccessTime.dwHighDateTime=0x1d5e6d9, ftLastWriteTime.dwLowDateTime=0x8c20f700, ftLastWriteTime.dwHighDateTime=0x1d5e6d9, nFileSizeHigh=0x0, nFileSizeLow=0x6ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="tyuwhl4i54TZgqIIHN.pptx", cAlternateFileName="TYUWHL~1.PPT")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa305b420, ftCreationTime.dwHighDateTime=0x1d5e287, ftLastAccessTime.dwLowDateTime=0xd05035f0, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0xd05035f0, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0xb227, dwReserved0=0x0, dwReserved1=0x0, cFileName="wVgeXuZ900.mp3", cAlternateFileName="WVGEXU~1.MP3")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c8b0c90, ftCreationTime.dwHighDateTime=0x1d5e786, ftLastAccessTime.dwLowDateTime=0xcf2c41f0, ftLastAccessTime.dwHighDateTime=0x1d5e556, ftLastWriteTime.dwLowDateTime=0xcf2c41f0, ftLastWriteTime.dwHighDateTime=0x1d5e556, nFileSizeHigh=0x0, nFileSizeLow=0xa7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="YYHvYCDfIlq.gif", cAlternateFileName="YYHVYC~1.GIF")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca625880, ftCreationTime.dwHighDateTime=0x1d5df9d, ftLastAccessTime.dwLowDateTime=0xe085eb00, ftLastAccessTime.dwHighDateTime=0x1d5ded9, ftLastWriteTime.dwLowDateTime=0xe085eb00, ftLastWriteTime.dwHighDateTime=0x1d5ded9, nFileSizeHigh=0x0, nFileSizeLow=0x8461, dwReserved0=0x0, dwReserved1=0x0, cFileName="zTFWlb2IXyJjf.wav", cAlternateFileName="ZTFWLB~1.WAV")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca625880, ftCreationTime.dwHighDateTime=0x1d5df9d, ftLastAccessTime.dwLowDateTime=0xe085eb00, ftLastAccessTime.dwHighDateTime=0x1d5ded9, ftLastWriteTime.dwLowDateTime=0xe085eb00, ftLastWriteTime.dwHighDateTime=0x1d5ded9, nFileSizeHigh=0x0, nFileSizeLow=0x8461, dwReserved0=0x0, dwReserved1=0x0, cFileName="zTFWlb2IXyJjf.wav", cAlternateFileName="ZTFWLB~1.WAV")) returned 0 [0145.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0145.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0145.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0145.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", lpFilePart=0x0) returned 0x3b [0145.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.360] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xdf92 [0145.360] ReadFile (in: hFile=0x344, lpBuffer=0x2749ff8, nNumberOfBytesToRead=0xdf92, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2749ff8*, lpNumberOfBytesRead=0x12dcb8*=0xdf92, lpOverlapped=0x0) returned 1 [0145.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", lpFilePart=0x0) returned 0x3b [0145.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.436] GetFileType (hFile=0x344) returned 0x1 [0145.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.436] GetFileType (hFile=0x344) returned 0x1 [0145.436] WriteFile (in: hFile=0x344, lpBuffer=0x27d2568*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27d2568*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.437] CloseHandle (hObject=0x344) returned 1 [0145.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", lpFilePart=0x0) returned 0x3b [0145.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.439] GetFileType (hFile=0x344) returned 0x1 [0145.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.439] GetFileType (hFile=0x344) returned 0x1 [0145.439] WriteFile (in: hFile=0x344, lpBuffer=0x27c2f60*, nNumberOfBytesToWrite=0xdfa0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27c2f60*, lpNumberOfBytesWritten=0x12dd18*=0xdfa0, lpOverlapped=0x0) returned 1 [0145.441] CloseHandle (hObject=0x344) returned 1 [0145.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt", lpFilePart=0x0) returned 0x3b [0145.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt.SYMMYWARE", lpFilePart=0x0) returned 0x45 [0145.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3fd5d360, ftCreationTime.dwHighDateTime=0x1d5dc2b, ftLastAccessTime.dwLowDateTime=0x3891c0e0, ftLastAccessTime.dwHighDateTime=0x1d5da51, ftLastWriteTime.dwLowDateTime=0x4ee9ff0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0)) returned 1 [0145.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.442] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\1F2Xy8fwh.odt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\1f2xy8fwh.odt.symmyware")) returned 1 [0145.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", lpFilePart=0x0) returned 0x41 [0145.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.444] GetFileType (hFile=0x344) returned 0x1 [0145.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.444] GetFileType (hFile=0x344) returned 0x1 [0145.444] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xc1d4 [0145.445] ReadFile (in: hFile=0x344, lpBuffer=0x27d3a68, nNumberOfBytesToRead=0xc1d4, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27d3a68*, lpNumberOfBytesRead=0x12dcb8*=0xc1d4, lpOverlapped=0x0) returned 1 [0145.446] CloseHandle (hObject=0x344) returned 1 [0145.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", lpFilePart=0x0) returned 0x41 [0145.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.463] GetFileType (hFile=0x344) returned 0x1 [0145.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.463] GetFileType (hFile=0x344) returned 0x1 [0145.463] WriteFile (in: hFile=0x344, lpBuffer=0x2854708*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2854708*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.465] CloseHandle (hObject=0x344) returned 1 [0145.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", lpFilePart=0x0) returned 0x41 [0145.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.467] GetFileType (hFile=0x344) returned 0x1 [0145.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.468] GetFileType (hFile=0x344) returned 0x1 [0145.468] WriteFile (in: hFile=0x344, lpBuffer=0x2846ea8*, nNumberOfBytesToWrite=0xc1e0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2846ea8*, lpNumberOfBytesWritten=0x12dd18*=0xc1e0, lpOverlapped=0x0) returned 1 [0145.472] CloseHandle (hObject=0x344) returned 1 [0145.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv", lpFilePart=0x0) returned 0x41 [0145.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0145.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9a970, ftCreationTime.dwHighDateTime=0x1d5d90b, ftLastAccessTime.dwLowDateTime=0xfe484570, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0x4f333d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc1e0)) returned 1 [0145.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\4MbyUMHaUw9Yc76.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\4mbyumhauw9yc76.flv.symmyware")) returned 1 [0145.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", lpFilePart=0x0) returned 0x3a [0145.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.475] GetFileType (hFile=0x344) returned 0x1 [0145.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.475] GetFileType (hFile=0x344) returned 0x1 [0145.475] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x3332 [0145.475] ReadFile (in: hFile=0x344, lpBuffer=0x2855c00, nNumberOfBytesToRead=0x3332, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2855c00*, lpNumberOfBytesRead=0x12dcb8*=0x3332, lpOverlapped=0x0) returned 1 [0145.477] CloseHandle (hObject=0x344) returned 1 [0145.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", lpFilePart=0x0) returned 0x3a [0145.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.514] GetFileType (hFile=0x344) returned 0x1 [0145.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.514] GetFileType (hFile=0x344) returned 0x1 [0145.515] WriteFile (in: hFile=0x344, lpBuffer=0x28b9480*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28b9480*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.517] CloseHandle (hObject=0x344) returned 1 [0145.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", lpFilePart=0x0) returned 0x3a [0145.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.518] GetFileType (hFile=0x344) returned 0x1 [0145.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.519] GetFileType (hFile=0x344) returned 0x1 [0145.519] WriteFile (in: hFile=0x344, lpBuffer=0x28b4ad8*, nNumberOfBytesToWrite=0x3340, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28b4ad8*, lpNumberOfBytesWritten=0x12dd18*=0x3340, lpOverlapped=0x0) returned 1 [0145.520] CloseHandle (hObject=0x344) returned 1 [0145.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi", lpFilePart=0x0) returned 0x3a [0145.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0145.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacaecc50, ftCreationTime.dwHighDateTime=0x1d5e5ac, ftLastAccessTime.dwLowDateTime=0xb0222420, ftLastAccessTime.dwHighDateTime=0x1d5dbc7, ftLastWriteTime.dwLowDateTime=0x4fa11a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3340)) returned 1 [0145.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.521] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\52_9XN w.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\52_9xn w.avi.symmyware")) returned 1 [0145.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", lpFilePart=0x0) returned 0x41 [0145.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.522] GetFileType (hFile=0x344) returned 0x1 [0145.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.523] GetFileType (hFile=0x344) returned 0x1 [0145.523] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x11fca [0145.523] ReadFile (in: hFile=0x344, lpBuffer=0x28ba9a8, nNumberOfBytesToRead=0x11fca, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28ba9a8*, lpNumberOfBytesRead=0x12dcb8*=0x11fca, lpOverlapped=0x0) returned 1 [0145.525] CloseHandle (hObject=0x344) returned 1 [0145.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", lpFilePart=0x0) returned 0x41 [0145.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.603] GetFileType (hFile=0x344) returned 0x1 [0145.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.603] GetFileType (hFile=0x344) returned 0x1 [0145.604] WriteFile (in: hFile=0x344, lpBuffer=0x2765918*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2765918*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.605] CloseHandle (hObject=0x344) returned 1 [0145.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", lpFilePart=0x0) returned 0x41 [0145.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.606] GetFileType (hFile=0x344) returned 0x1 [0145.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.606] GetFileType (hFile=0x344) returned 0x1 [0145.606] WriteFile (in: hFile=0x344, lpBuffer=0x27522c8*, nNumberOfBytesToWrite=0x11fd0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27522c8*, lpNumberOfBytesWritten=0x12dd18*=0x11fd0, lpOverlapped=0x0) returned 1 [0145.609] CloseHandle (hObject=0x344) returned 1 [0145.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg", lpFilePart=0x0) returned 0x41 [0145.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0145.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e2c5b70, ftCreationTime.dwHighDateTime=0x1d5e4ff, ftLastAccessTime.dwLowDateTime=0x15144de0, ftLastAccessTime.dwHighDateTime=0x1d5e02d, ftLastWriteTime.dwLowDateTime=0x5075810, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11fd0)) returned 1 [0145.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.610] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\aqnarxxuyMZ0XOv.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqnarxxuymz0xov.jpg.symmyware")) returned 1 [0145.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", lpFilePart=0x0) returned 0x46 [0145.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.611] GetFileType (hFile=0x344) returned 0x1 [0145.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.611] GetFileType (hFile=0x344) returned 0x1 [0145.611] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x3955 [0145.612] ReadFile (in: hFile=0x344, lpBuffer=0x2766e40, nNumberOfBytesToRead=0x3955, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2766e40*, lpNumberOfBytesRead=0x12dcb8*=0x3955, lpOverlapped=0x0) returned 1 [0145.613] CloseHandle (hObject=0x344) returned 1 [0145.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", lpFilePart=0x0) returned 0x46 [0145.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.623] GetFileType (hFile=0x344) returned 0x1 [0145.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.624] GetFileType (hFile=0x344) returned 0x1 [0145.624] WriteFile (in: hFile=0x344, lpBuffer=0x27ccd98*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27ccd98*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.625] CloseHandle (hObject=0x344) returned 1 [0145.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", lpFilePart=0x0) returned 0x46 [0145.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.626] GetFileType (hFile=0x344) returned 0x1 [0145.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.626] GetFileType (hFile=0x344) returned 0x1 [0145.626] WriteFile (in: hFile=0x344, lpBuffer=0x27c7da0*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27c7da0*, lpNumberOfBytesWritten=0x12dd18*=0x3960, lpOverlapped=0x0) returned 1 [0145.627] CloseHandle (hObject=0x344) returned 1 [0145.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a", lpFilePart=0x0) returned 0x46 [0145.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x50 [0145.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf88ebbc0, ftCreationTime.dwHighDateTime=0x1d5e198, ftLastAccessTime.dwLowDateTime=0xd94df3b0, ftLastAccessTime.dwHighDateTime=0x1d5e324, ftLastWriteTime.dwLowDateTime=0x509a200, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0145.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.628] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b1EBUJ LFTVN-dRE02w9.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b1ebuj lftvn-dre02w9.m4a.symmyware")) returned 1 [0145.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", lpFilePart=0x0) returned 0x44 [0145.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.630] GetFileType (hFile=0x344) returned 0x1 [0145.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.630] GetFileType (hFile=0x344) returned 0x1 [0145.630] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x76c2 [0145.631] ReadFile (in: hFile=0x344, lpBuffer=0x27ce2f8, nNumberOfBytesToRead=0x76c2, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27ce2f8*, lpNumberOfBytesRead=0x12dcb8*=0x76c2, lpOverlapped=0x0) returned 1 [0145.632] CloseHandle (hObject=0x344) returned 1 [0145.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", lpFilePart=0x0) returned 0x44 [0145.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.642] GetFileType (hFile=0x344) returned 0x1 [0145.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.642] GetFileType (hFile=0x344) returned 0x1 [0145.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", lpFilePart=0x0) returned 0x44 [0145.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.645] GetFileType (hFile=0x344) returned 0x1 [0145.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.645] GetFileType (hFile=0x344) returned 0x1 [0145.645] WriteFile (in: hFile=0x344, lpBuffer=0x28423a0*, nNumberOfBytesToWrite=0x76d0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28423a0*, lpNumberOfBytesWritten=0x12dd18*=0x76d0, lpOverlapped=0x0) returned 1 [0145.647] CloseHandle (hObject=0x344) returned 1 [0145.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv", lpFilePart=0x0) returned 0x44 [0145.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv.SYMMYWARE", lpFilePart=0x0) returned 0x4e [0145.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x932683d0, ftCreationTime.dwHighDateTime=0x1d5df45, ftLastAccessTime.dwLowDateTime=0x3f56e470, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x50bebf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x76d0)) returned 1 [0145.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.648] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\BJPssD9yrqIBrhKg8d.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bjpssd9yrqibrhkg8d.flv.symmyware")) returned 1 [0145.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", lpFilePart=0x0) returned 0x38 [0145.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.649] GetFileType (hFile=0x344) returned 0x1 [0145.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.649] GetFileType (hFile=0x344) returned 0x1 [0145.649] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xd409 [0145.651] ReadFile (in: hFile=0x344, lpBuffer=0x284c640, nNumberOfBytesToRead=0xd409, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x284c640*, lpNumberOfBytesRead=0x12dcb8*=0xd409, lpOverlapped=0x0) returned 1 [0145.653] CloseHandle (hObject=0x344) returned 1 [0145.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", lpFilePart=0x0) returned 0x38 [0145.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.663] GetFileType (hFile=0x344) returned 0x1 [0145.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.664] GetFileType (hFile=0x344) returned 0x1 [0145.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", lpFilePart=0x0) returned 0x38 [0145.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.667] GetFileType (hFile=0x344) returned 0x1 [0145.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.667] GetFileType (hFile=0x344) returned 0x1 [0145.667] WriteFile (in: hFile=0x344, lpBuffer=0x28c3110*, nNumberOfBytesToWrite=0xd410, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28c3110*, lpNumberOfBytesWritten=0x12dd18*=0xd410, lpOverlapped=0x0) returned 1 [0145.669] CloseHandle (hObject=0x344) returned 1 [0145.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods", lpFilePart=0x0) returned 0x38 [0145.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods.SYMMYWARE", lpFilePart=0x0) returned 0x42 [0145.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc0ced720, ftCreationTime.dwHighDateTime=0x1d5d936, ftLastAccessTime.dwLowDateTime=0x805288a0, ftLastAccessTime.dwHighDateTime=0x1d5e155, ftLastWriteTime.dwLowDateTime=0x50f2040, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd410)) returned 1 [0145.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.670] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bssEB1.ods.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bsseb1.ods.symmyware")) returned 1 [0145.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", lpFilePart=0x0) returned 0x3c [0145.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.672] GetFileType (hFile=0x344) returned 0x1 [0145.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.672] GetFileType (hFile=0x344) returned 0x1 [0145.672] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x2cc1 [0145.672] ReadFile (in: hFile=0x344, lpBuffer=0x28d3058, nNumberOfBytesToRead=0x2cc1, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28d3058*, lpNumberOfBytesRead=0x12dcb8*=0x2cc1, lpOverlapped=0x0) returned 1 [0145.673] CloseHandle (hObject=0x344) returned 1 [0145.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", lpFilePart=0x0) returned 0x3c [0145.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.761] GetFileType (hFile=0x344) returned 0x1 [0145.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.761] GetFileType (hFile=0x344) returned 0x1 [0145.761] WriteFile (in: hFile=0x344, lpBuffer=0x2724f50*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2724f50*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.763] CloseHandle (hObject=0x344) returned 1 [0145.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", lpFilePart=0x0) returned 0x3c [0145.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.765] GetFileType (hFile=0x344) returned 0x1 [0145.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.765] GetFileType (hFile=0x344) returned 0x1 [0145.765] WriteFile (in: hFile=0x344, lpBuffer=0x2720c10*, nNumberOfBytesToWrite=0x2cd0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2720c10*, lpNumberOfBytesWritten=0x12dd18*=0x2cd0, lpOverlapped=0x0) returned 1 [0145.766] CloseHandle (hObject=0x344) returned 1 [0145.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png", lpFilePart=0x0) returned 0x3c [0145.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png.SYMMYWARE", lpFilePart=0x0) returned 0x46 [0145.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba7408a0, ftCreationTime.dwHighDateTime=0x1d5e601, ftLastAccessTime.dwLowDateTime=0x723ba320, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0x51ba360, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2cd0)) returned 1 [0145.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.767] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ClRZkTs-zR.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\clrzkts-zr.png.symmyware")) returned 1 [0145.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", lpFilePart=0x0) returned 0x3e [0145.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.770] GetFileType (hFile=0x344) returned 0x1 [0145.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.770] GetFileType (hFile=0x344) returned 0x1 [0145.770] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x2827 [0145.770] ReadFile (in: hFile=0x344, lpBuffer=0x2726430, nNumberOfBytesToRead=0x2827, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2726430*, lpNumberOfBytesRead=0x12dcb8*=0x2827, lpOverlapped=0x0) returned 1 [0145.772] CloseHandle (hObject=0x344) returned 1 [0145.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", lpFilePart=0x0) returned 0x3e [0145.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.785] GetFileType (hFile=0x344) returned 0x1 [0145.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.785] GetFileType (hFile=0x344) returned 0x1 [0145.785] WriteFile (in: hFile=0x344, lpBuffer=0x2785c48*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2785c48*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.786] CloseHandle (hObject=0x344) returned 1 [0145.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", lpFilePart=0x0) returned 0x3e [0145.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.788] GetFileType (hFile=0x344) returned 0x1 [0145.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.789] GetFileType (hFile=0x344) returned 0x1 [0145.789] WriteFile (in: hFile=0x344, lpBuffer=0x2781da0*, nNumberOfBytesToWrite=0x2830, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2781da0*, lpNumberOfBytesWritten=0x12dd18*=0x2830, lpOverlapped=0x0) returned 1 [0145.790] CloseHandle (hObject=0x344) returned 1 [0145.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx", lpFilePart=0x0) returned 0x3e [0145.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x48 [0145.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d7cbe90, ftCreationTime.dwHighDateTime=0x1d5db5c, ftLastAccessTime.dwLowDateTime=0x2738ca90, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x51f25d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2830)) returned 1 [0145.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.791] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DaxfbjZ_-JX.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\daxfbjz_-jx.pptx.symmyware")) returned 1 [0145.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", lpFilePart=0x0) returned 0x41 [0145.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.792] GetFileType (hFile=0x344) returned 0x1 [0145.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.793] GetFileType (hFile=0x344) returned 0x1 [0145.793] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x5c8e [0145.793] ReadFile (in: hFile=0x344, lpBuffer=0x2787170, nNumberOfBytesToRead=0x5c8e, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2787170*, lpNumberOfBytesRead=0x12dcb8*=0x5c8e, lpOverlapped=0x0) returned 1 [0145.794] CloseHandle (hObject=0x344) returned 1 [0145.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", lpFilePart=0x0) returned 0x41 [0145.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.807] GetFileType (hFile=0x344) returned 0x1 [0145.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.807] GetFileType (hFile=0x344) returned 0x1 [0145.807] WriteFile (in: hFile=0x344, lpBuffer=0x27fa1e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27fa1e8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.809] CloseHandle (hObject=0x344) returned 1 [0145.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", lpFilePart=0x0) returned 0x41 [0145.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.811] GetFileType (hFile=0x344) returned 0x1 [0145.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.811] GetFileType (hFile=0x344) returned 0x1 [0145.811] WriteFile (in: hFile=0x344, lpBuffer=0x27f2ed8*, nNumberOfBytesToWrite=0x5c90, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27f2ed8*, lpNumberOfBytesWritten=0x12dd18*=0x5c90, lpOverlapped=0x0) returned 1 [0145.813] CloseHandle (hObject=0x344) returned 1 [0145.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg", lpFilePart=0x0) returned 0x41 [0145.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0145.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf73bbcc0, ftCreationTime.dwHighDateTime=0x1d5db33, ftLastAccessTime.dwLowDateTime=0x38c2a020, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x5228130, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5c90)) returned 1 [0145.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.814] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\DXob1PIuEKEgUsu.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dxob1piuekegusu.jpg.symmyware")) returned 1 [0145.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", lpFilePart=0x0) returned 0x43 [0145.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.816] GetFileType (hFile=0x344) returned 0x1 [0145.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.816] GetFileType (hFile=0x344) returned 0x1 [0145.816] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xe6fb [0145.816] ReadFile (in: hFile=0x344, lpBuffer=0x27fb728, nNumberOfBytesToRead=0xe6fb, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27fb728*, lpNumberOfBytesRead=0x12dcb8*=0xe6fb, lpOverlapped=0x0) returned 1 [0145.819] CloseHandle (hObject=0x344) returned 1 [0145.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", lpFilePart=0x0) returned 0x43 [0145.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.831] GetFileType (hFile=0x344) returned 0x1 [0145.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.831] GetFileType (hFile=0x344) returned 0x1 [0145.831] WriteFile (in: hFile=0x344, lpBuffer=0x2885850*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2885850*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.833] CloseHandle (hObject=0x344) returned 1 [0145.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", lpFilePart=0x0) returned 0x43 [0145.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.834] GetFileType (hFile=0x344) returned 0x1 [0145.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.835] GetFileType (hFile=0x344) returned 0x1 [0145.835] WriteFile (in: hFile=0x344, lpBuffer=0x2875ac8*, nNumberOfBytesToWrite=0xe700, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2875ac8*, lpNumberOfBytesWritten=0x12dd18*=0xe700, lpOverlapped=0x0) returned 1 [0145.839] CloseHandle (hObject=0x344) returned 1 [0145.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg", lpFilePart=0x0) returned 0x43 [0145.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0145.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18dd6d40, ftCreationTime.dwHighDateTime=0x1d5df50, ftLastAccessTime.dwLowDateTime=0x4f0da120, ftLastAccessTime.dwHighDateTime=0x1d5d80f, ftLastWriteTime.dwLowDateTime=0x5269fe0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe700)) returned 1 [0145.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.840] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\esyAsmf-izw8n0fDv.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\esyasmf-izw8n0fdv.jpg.symmyware")) returned 1 [0145.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", lpFilePart=0x0) returned 0x37 [0145.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.842] GetFileType (hFile=0x344) returned 0x1 [0145.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.842] GetFileType (hFile=0x344) returned 0x1 [0145.842] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xa5ee [0145.843] ReadFile (in: hFile=0x344, lpBuffer=0x2886d50, nNumberOfBytesToRead=0xa5ee, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2886d50*, lpNumberOfBytesRead=0x12dcb8*=0xa5ee, lpOverlapped=0x0) returned 1 [0145.844] CloseHandle (hObject=0x344) returned 1 [0145.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", lpFilePart=0x0) returned 0x37 [0145.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.864] GetFileType (hFile=0x344) returned 0x1 [0145.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.865] GetFileType (hFile=0x344) returned 0x1 [0145.865] WriteFile (in: hFile=0x344, lpBuffer=0x2727d70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2727d70*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.866] CloseHandle (hObject=0x344) returned 1 [0145.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", lpFilePart=0x0) returned 0x37 [0145.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.868] GetFileType (hFile=0x344) returned 0x1 [0145.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.868] GetFileType (hFile=0x344) returned 0x1 [0145.868] WriteFile (in: hFile=0x344, lpBuffer=0x271c128*, nNumberOfBytesToWrite=0xa5f0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x271c128*, lpNumberOfBytesWritten=0x12dd18*=0xa5f0, lpOverlapped=0x0) returned 1 [0145.870] CloseHandle (hObject=0x344) returned 1 [0145.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv", lpFilePart=0x0) returned 0x37 [0145.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0145.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93c82e0, ftCreationTime.dwHighDateTime=0x1d5e2bb, ftLastAccessTime.dwLowDateTime=0xf5faef40, ftLastAccessTime.dwHighDateTime=0x1d5dfdc, ftLastWriteTime.dwLowDateTime=0x52b33c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa5f0)) returned 1 [0145.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.871] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\J0UK3.csv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\j0uk3.csv.symmyware")) returned 1 [0145.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", lpFilePart=0x0) returned 0x3a [0145.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.872] GetFileType (hFile=0x344) returned 0x1 [0145.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.873] GetFileType (hFile=0x344) returned 0x1 [0145.873] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x8ade [0145.873] ReadFile (in: hFile=0x344, lpBuffer=0x27292d0, nNumberOfBytesToRead=0x8ade, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27292d0*, lpNumberOfBytesRead=0x12dcb8*=0x8ade, lpOverlapped=0x0) returned 1 [0145.876] CloseHandle (hObject=0x344) returned 1 [0145.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", lpFilePart=0x0) returned 0x3a [0145.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.969] GetFileType (hFile=0x344) returned 0x1 [0145.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.969] GetFileType (hFile=0x344) returned 0x1 [0145.969] WriteFile (in: hFile=0x344, lpBuffer=0x27adaf8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27adaf8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.971] CloseHandle (hObject=0x344) returned 1 [0145.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", lpFilePart=0x0) returned 0x3a [0145.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.973] GetFileType (hFile=0x344) returned 0x1 [0145.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.973] GetFileType (hFile=0x344) returned 0x1 [0145.973] WriteFile (in: hFile=0x344, lpBuffer=0x27a39b0*, nNumberOfBytesToWrite=0x8ae0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27a39b0*, lpNumberOfBytesWritten=0x12dd18*=0x8ae0, lpOverlapped=0x0) returned 1 [0145.976] CloseHandle (hObject=0x344) returned 1 [0145.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx", lpFilePart=0x0) returned 0x3a [0145.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0145.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0145.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca79600, ftCreationTime.dwHighDateTime=0x1d5e498, ftLastAccessTime.dwLowDateTime=0x46180460, ftLastAccessTime.dwHighDateTime=0x1d5e3e6, ftLastWriteTime.dwLowDateTime=0x53a7600, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8ae0)) returned 1 [0145.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0145.977] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\P7WLWid.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\p7wlwid.xlsx.symmyware")) returned 1 [0145.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", lpFilePart=0x0) returned 0x45 [0145.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.979] GetFileType (hFile=0x344) returned 0x1 [0145.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0145.979] GetFileType (hFile=0x344) returned 0x1 [0145.979] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x6ce6 [0145.980] ReadFile (in: hFile=0x344, lpBuffer=0x27af030, nNumberOfBytesToRead=0x6ce6, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27af030*, lpNumberOfBytesRead=0x12dcb8*=0x6ce6, lpOverlapped=0x0) returned 1 [0145.981] CloseHandle (hObject=0x344) returned 1 [0145.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", lpFilePart=0x0) returned 0x45 [0145.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0145.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0145.995] GetFileType (hFile=0x344) returned 0x1 [0145.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0145.995] GetFileType (hFile=0x344) returned 0x1 [0145.995] WriteFile (in: hFile=0x344, lpBuffer=0x28282f8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28282f8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0145.997] CloseHandle (hObject=0x344) returned 1 [0145.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", lpFilePart=0x0) returned 0x45 [0145.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0145.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0145.999] GetFileType (hFile=0x344) returned 0x1 [0146.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0146.000] GetFileType (hFile=0x344) returned 0x1 [0146.000] WriteFile (in: hFile=0x344, lpBuffer=0x281ff78*, nNumberOfBytesToWrite=0x6cf0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x281ff78*, lpNumberOfBytesWritten=0x12dd18*=0x6cf0, lpOverlapped=0x0) returned 1 [0146.002] CloseHandle (hObject=0x344) returned 1 [0146.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx", lpFilePart=0x0) returned 0x45 [0146.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x4f [0146.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ba94750, ftCreationTime.dwHighDateTime=0x1d5e7a2, ftLastAccessTime.dwLowDateTime=0x8c20f700, ftLastAccessTime.dwHighDateTime=0x1d5e6d9, ftLastWriteTime.dwLowDateTime=0x53e94b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6cf0)) returned 1 [0146.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0146.004] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\tyuwhl4i54TZgqIIHN.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tyuwhl4i54tzgqiihn.pptx.symmyware")) returned 1 [0146.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0146.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0146.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.022] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0146.023] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0146.024] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0146.024] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0146.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0146.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0146.026] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0146.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0146.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0146.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0146.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0146.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0146.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0146.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.033] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0146.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0146.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0146.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0146.039] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0146.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0146.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0146.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.042] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0146.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0146.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0146.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0146.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0146.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0146.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0146.047] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0146.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0146.048] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.048] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0146.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0146.049] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0146.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0146.050] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.050] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0146.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0146.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.052] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.052] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0146.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0146.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.054] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0146.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0146.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0146.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.061] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0146.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0146.061] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.061] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.062] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.062] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x54 [0146.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0146.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0146.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.066] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.068] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0146.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0146.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.068] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0146.070] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0146.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0146.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0146.071] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0x0 [0146.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0146.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0146.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0146.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0146.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0146.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0146.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js", lpFilePart=0x0) returned 0x54 [0146.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.SYMMYWARE", lpFilePart=0x0) returned 0x5e [0146.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x5559f20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0146.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0146.159] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js.symmyware")) returned 1 [0146.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0146.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0146.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.161] GetFileType (hFile=0x344) returned 0x1 [0146.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0146.161] GetFileType (hFile=0x344) returned 0x1 [0146.161] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xa [0146.161] ReadFile (in: hFile=0x344, lpBuffer=0x2891c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x2891c00*, lpNumberOfBytesRead=0x12dab8*=0xa, lpOverlapped=0x0) returned 1 [0146.162] CloseHandle (hObject=0x344) returned 1 [0146.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0146.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0146.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.175] GetFileType (hFile=0x344) returned 0x1 [0146.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0146.175] GetFileType (hFile=0x344) returned 0x1 [0146.175] WriteFile (in: hFile=0x344, lpBuffer=0x28e3270*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x28e3270*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0146.177] CloseHandle (hObject=0x344) returned 1 [0146.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0146.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0146.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.179] GetFileType (hFile=0x344) returned 0x1 [0146.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0146.180] GetFileType (hFile=0x344) returned 0x1 [0146.180] WriteFile (in: hFile=0x344, lpBuffer=0x28e4428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x28e4428*, lpNumberOfBytesWritten=0x12d9c8*=0x10, lpOverlapped=0x0) returned 1 [0146.181] CloseHandle (hObject=0x344) returned 1 [0146.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js", lpFilePart=0x0) returned 0x5d [0146.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.SYMMYWARE", lpFilePart=0x0) returned 0x67 [0146.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x5588550, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0146.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0146.182] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.symmyware")) returned 1 [0146.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5a [0146.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.187] GetFileType (hFile=0x344) returned 0x1 [0146.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.188] GetFileType (hFile=0x344) returned 0x1 [0146.190] WriteFile (in: hFile=0x344, lpBuffer=0x28e7990*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x28e7990*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.193] CloseHandle (hObject=0x344) returned 1 [0146.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0146.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0146.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.199] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0146.200] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0146.201] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0146.201] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0146.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0146.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.202] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0146.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0146.203] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.204] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0146.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0146.204] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.206] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.206] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0146.207] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0146.207] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.207] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0146.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0146.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0146.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0146.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.208] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0146.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0146.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0146.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0146.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0146.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0146.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0146.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.213] GetFileType (hFile=0x344) returned 0x1 [0146.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0146.214] GetFileType (hFile=0x344) returned 0x1 [0146.215] WriteFile (in: hFile=0x344, lpBuffer=0x28f0980*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x28f0980*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0146.216] CloseHandle (hObject=0x344) returned 1 [0146.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0146.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.218] GetFileType (hFile=0x344) returned 0x1 [0146.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.218] GetFileType (hFile=0x344) returned 0x1 [0146.219] WriteFile (in: hFile=0x344, lpBuffer=0x28f3c88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x28f3c88*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.221] CloseHandle (hObject=0x344) returned 1 [0146.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0146.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0146.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.225] GetFileType (hFile=0x344) returned 0x1 [0146.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0146.226] GetFileType (hFile=0x344) returned 0x1 [0146.227] WriteFile (in: hFile=0x344, lpBuffer=0x28f6f70*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x28f6f70*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0146.229] CloseHandle (hObject=0x344) returned 1 [0146.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0146.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.230] GetFileType (hFile=0x344) returned 0x1 [0146.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.230] GetFileType (hFile=0x344) returned 0x1 [0146.231] WriteFile (in: hFile=0x344, lpBuffer=0x28fa248*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x28fa248*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.233] CloseHandle (hObject=0x344) returned 1 [0146.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0146.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0146.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0146.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0146.237] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0146.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0146.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0146.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.240] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0146.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0146.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1 [0146.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 0 [0146.244] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0146.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0146.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1 [0146.247] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.247] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0146.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0146.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.251] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0146.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0146.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.253] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0146.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.255] GetFileType (hFile=0x344) returned 0x1 [0146.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.255] GetFileType (hFile=0x344) returned 0x1 [0146.256] WriteFile (in: hFile=0x344, lpBuffer=0x2904450*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2904450*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.258] CloseHandle (hObject=0x344) returned 1 [0146.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0146.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0146.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.259] GetFileType (hFile=0x344) returned 0x1 [0146.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0146.259] GetFileType (hFile=0x344) returned 0x1 [0146.261] WriteFile (in: hFile=0x344, lpBuffer=0x2907768*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2907768*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0146.263] CloseHandle (hObject=0x344) returned 1 [0146.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0146.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.264] GetFileType (hFile=0x344) returned 0x1 [0146.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.264] GetFileType (hFile=0x344) returned 0x1 [0146.265] WriteFile (in: hFile=0x344, lpBuffer=0x290aa50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x290aa50*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.266] CloseHandle (hObject=0x344) returned 1 [0146.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0146.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0146.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.269] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0146.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0146.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.271] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0146.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.272] GetFileType (hFile=0x344) returned 0x1 [0146.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.272] GetFileType (hFile=0x344) returned 0x1 [0146.273] WriteFile (in: hFile=0x344, lpBuffer=0x290fcd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x290fcd8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.275] CloseHandle (hObject=0x344) returned 1 [0146.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0146.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0146.276] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0146.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0146.278] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0146.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0146.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.280] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0146.280] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.280] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0146.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0146.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.283] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.284] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0146.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0146.285] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.286] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.287] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.287] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5a [0146.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0146.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.289] GetFileType (hFile=0x344) returned 0x1 [0146.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0146.290] GetFileType (hFile=0x344) returned 0x1 [0146.291] WriteFile (in: hFile=0x344, lpBuffer=0x29176b8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x29176b8*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0146.293] CloseHandle (hObject=0x344) returned 1 [0146.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0146.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.295] GetFileType (hFile=0x344) returned 0x1 [0146.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.295] GetFileType (hFile=0x344) returned 0x1 [0146.299] WriteFile (in: hFile=0x344, lpBuffer=0x291a9a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x291a9a0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.301] CloseHandle (hObject=0x344) returned 1 [0146.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0146.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0146.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.303] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.304] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0146.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0146.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.306] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.307] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.307] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0146.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.310] WriteFile (in: hFile=0x344, lpBuffer=0x291fc88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x291fc88*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0146.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0146.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0146.315] WriteFile (in: hFile=0x344, lpBuffer=0x2922f40*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2922f40*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0146.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0146.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0146.317] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0146.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0146.319] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0146.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0146.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0146.321] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.321] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0146.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0146.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.324] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0146.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0146.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.325] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0146.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0146.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0146.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0146.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0146.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0146.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0146.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0146.337] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0146.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0146.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0146.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.340] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0146.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0146.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0146.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0146.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0146.343] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0146.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0146.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.345] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0146.346] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0146.347] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.347] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0146.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0146.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.350] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1 [0146.351] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0 [0146.351] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0146.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0146.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1 [0146.353] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.354] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0146.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0146.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.356] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.357] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0146.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0146.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.359] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0146.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0146.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0146.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0146.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0146.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0146.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0146.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0146.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0146.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0146.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0146.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.371] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0146.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0146.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0146.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0146.373] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0146.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0146.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.374] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0146.374] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.374] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0146.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0146.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0146.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0146.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0146.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0146.376] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0146.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0146.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0146.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0146.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0146.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.376] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0146.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.377] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0146.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0146.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0146.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0146.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0146.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.378] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0146.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0146.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0146.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0146.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0146.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0146.379] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0146.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0146.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7a [0146.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0146.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0146.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x76 [0146.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0146.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0146.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0146.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0146.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0146.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0146.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0146.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0146.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0146.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0146.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0146.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0146.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0146.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0146.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0146.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0146.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0146.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0146.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0146.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0146.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0146.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0146.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0146.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0146.401] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0146.401] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0146.401] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0146.401] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0146.401] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.401] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0146.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0146.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0146.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0146.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.403] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.403] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.403] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0146.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0146.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.404] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0146.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0146.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0146.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.409] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0146.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0146.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.409] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0146.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0146.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0146.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0146.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0146.413] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0146.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0146.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0146.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.414] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0146.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0146.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0146.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0146.415] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0146.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0146.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0146.415] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.416] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0146.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0146.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.491] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.491] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1 [0146.491] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1 [0146.492] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1 [0146.492] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.492] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0146.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0146.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1 [0146.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1 [0146.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1 [0146.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 0 [0146.495] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7f [0146.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0146.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0146.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0146.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0146.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0146.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0146.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0146.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0146.508] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0146.509] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.509] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0146.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0146.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0146.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0146.510] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0146.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0146.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0146.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.511] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0146.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0146.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.513] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.513] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0146.514] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.514] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0146.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0146.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0146.516] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0146.516] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0146.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0146.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5e [0146.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0146.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0146.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0146.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0146.526] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0146.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0146.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0146.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.527] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0146.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0146.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.528] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0146.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0146.529] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.529] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0146.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0146.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0146.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0146.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.543] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.544] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.544] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0146.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0146.545] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.545] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.546] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.546] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0146.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.548] GetFileType (hFile=0x344) returned 0x1 [0146.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.548] GetFileType (hFile=0x344) returned 0x1 [0146.548] WriteFile (in: hFile=0x344, lpBuffer=0x2721598*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2721598*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.550] CloseHandle (hObject=0x344) returned 1 [0146.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0146.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0146.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.551] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.552] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0146.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0146.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.553] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.553] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0146.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.573] GetFileType (hFile=0x344) returned 0x1 [0146.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.573] GetFileType (hFile=0x344) returned 0x1 [0146.575] WriteFile (in: hFile=0x344, lpBuffer=0x2726820*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2726820*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.577] CloseHandle (hObject=0x344) returned 1 [0146.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0146.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0146.583] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.584] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.584] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.584] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0146.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0146.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.585] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.585] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0146.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.586] GetFileType (hFile=0x344) returned 0x1 [0146.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.586] GetFileType (hFile=0x344) returned 0x1 [0146.587] WriteFile (in: hFile=0x344, lpBuffer=0x272bac8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x272bac8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.588] CloseHandle (hObject=0x344) returned 1 [0146.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0146.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0146.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.590] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0146.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0146.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.594] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0146.594] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0146.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0146.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.595] GetFileType (hFile=0x344) returned 0x1 [0146.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0146.595] GetFileType (hFile=0x344) returned 0x1 [0146.596] WriteFile (in: hFile=0x344, lpBuffer=0x2730d70*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2730d70*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0146.597] CloseHandle (hObject=0x344) returned 1 [0146.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0146.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0146.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0146.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0146.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0 [0146.599] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0146.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0146.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0146.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0146.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0146.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.601] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0146.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0146.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0146.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0146.605] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0146.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0146.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0146.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0146.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.607] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0146.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0146.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0146.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0146.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0146.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0146.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0146.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0146.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0146.610] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0146.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0146.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0146.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0146.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.612] GetFileType (hFile=0x344) returned 0x1 [0146.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.612] GetFileType (hFile=0x344) returned 0x1 [0146.612] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x8e9 [0146.612] ReadFile (in: hFile=0x344, lpBuffer=0x2739878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x2739878*, lpNumberOfBytesRead=0x12db38*=0x8e9, lpOverlapped=0x0) returned 1 [0146.618] CloseHandle (hObject=0x344) returned 1 [0146.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0146.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0146.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.688] GetFileType (hFile=0x344) returned 0x1 [0146.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0146.689] GetFileType (hFile=0x344) returned 0x1 [0146.689] WriteFile (in: hFile=0x344, lpBuffer=0x278dc78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x278dc78*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0146.691] CloseHandle (hObject=0x344) returned 1 [0146.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0146.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.692] GetFileType (hFile=0x344) returned 0x1 [0146.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.692] GetFileType (hFile=0x344) returned 0x1 [0146.693] WriteFile (in: hFile=0x344, lpBuffer=0x278ee48*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x278ee48*, lpNumberOfBytesWritten=0x12da48*=0x8f0, lpOverlapped=0x0) returned 1 [0146.694] CloseHandle (hObject=0x344) returned 1 [0146.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0146.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x72 [0146.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5a25f90, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8f0)) returned 1 [0146.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0146.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.symmyware")) returned 1 [0146.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0146.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.697] GetFileType (hFile=0x344) returned 0x1 [0146.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.697] GetFileType (hFile=0x344) returned 0x1 [0146.697] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x5a7 [0146.697] ReadFile (in: hFile=0x344, lpBuffer=0x2790938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x2790938*, lpNumberOfBytesRead=0x12db38*=0x5a7, lpOverlapped=0x0) returned 1 [0146.929] CloseHandle (hObject=0x344) returned 1 [0146.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0146.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0146.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.940] GetFileType (hFile=0x344) returned 0x1 [0146.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0146.940] GetFileType (hFile=0x344) returned 0x1 [0146.941] WriteFile (in: hFile=0x344, lpBuffer=0x27e3b60*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x27e3b60*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0146.966] CloseHandle (hObject=0x344) returned 1 [0146.970] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0146.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.971] GetFileType (hFile=0x344) returned 0x1 [0146.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.972] GetFileType (hFile=0x344) returned 0x1 [0146.972] WriteFile (in: hFile=0x344, lpBuffer=0x27e4d78*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x27e4d78*, lpNumberOfBytesWritten=0x12da48*=0x5b0, lpOverlapped=0x0) returned 1 [0146.973] CloseHandle (hObject=0x344) returned 1 [0146.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0146.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x85 [0146.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5c047d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0146.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0146.974] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk.symmyware")) returned 1 [0146.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0146.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.977] GetFileType (hFile=0x344) returned 0x1 [0146.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.977] GetFileType (hFile=0x344) returned 0x1 [0146.977] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x122 [0146.977] ReadFile (in: hFile=0x344, lpBuffer=0x27e6410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x27e6410*, lpNumberOfBytesRead=0x12db38*=0x122, lpOverlapped=0x0) returned 1 [0146.978] CloseHandle (hObject=0x344) returned 1 [0146.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0146.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0146.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0146.992] GetFileType (hFile=0x344) returned 0x1 [0146.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0146.992] GetFileType (hFile=0x344) returned 0x1 [0146.993] WriteFile (in: hFile=0x344, lpBuffer=0x2837f70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x2837f70*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0146.994] CloseHandle (hObject=0x344) returned 1 [0146.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0146.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0146.996] GetFileType (hFile=0x344) returned 0x1 [0146.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0146.996] GetFileType (hFile=0x344) returned 0x1 [0146.996] WriteFile (in: hFile=0x344, lpBuffer=0x2839140*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x2839140*, lpNumberOfBytesWritten=0x12da48*=0x130, lpOverlapped=0x0) returned 1 [0146.997] CloseHandle (hObject=0x344) returned 1 [0146.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0146.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x72 [0146.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0146.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5c3ca40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0146.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0146.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.symmyware")) returned 1 [0146.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0146.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0146.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.001] GetFileType (hFile=0x344) returned 0x1 [0147.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0147.001] GetFileType (hFile=0x344) returned 0x1 [0147.001] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x110 [0147.001] ReadFile (in: hFile=0x344, lpBuffer=0x283a750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x283a750*, lpNumberOfBytesRead=0x12db38*=0x110, lpOverlapped=0x0) returned 1 [0147.002] CloseHandle (hObject=0x344) returned 1 [0147.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0147.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0147.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.016] GetFileType (hFile=0x344) returned 0x1 [0147.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0147.016] GetFileType (hFile=0x344) returned 0x1 [0147.016] WriteFile (in: hFile=0x344, lpBuffer=0x288c260*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x288c260*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0147.018] CloseHandle (hObject=0x344) returned 1 [0147.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0147.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.020] GetFileType (hFile=0x344) returned 0x1 [0147.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0147.020] GetFileType (hFile=0x344) returned 0x1 [0147.020] WriteFile (in: hFile=0x344, lpBuffer=0x288d430*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x12da48, lpOverlapped=0x0 | out: lpBuffer=0x288d430*, lpNumberOfBytesWritten=0x12da48*=0x120, lpOverlapped=0x0) returned 1 [0147.022] CloseHandle (hObject=0x344) returned 1 [0147.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0147.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x74 [0147.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0147.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5c773c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0147.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0147.022] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.symmyware")) returned 1 [0147.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0147.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0147.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0147.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.024] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0147.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0147.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0147.026] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0147.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0147.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0147.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0147.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0147.026] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.027] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0147.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0147.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0147.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0147.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.029] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0147.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0147.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.031] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x85 [0147.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0147.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0147.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0147.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0147.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0147.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0147.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0147.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0147.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0147.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0147.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.040] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0147.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0147.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0147.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0147.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0147.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0147.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0147.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0147.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0147.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0147.044] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0147.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.045] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x8dd [0147.045] ReadFile (in: hFile=0x344, lpBuffer=0x289e350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x289e350*, lpNumberOfBytesRead=0x12da38*=0x8dd, lpOverlapped=0x0) returned 1 [0147.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0147.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.107] GetFileType (hFile=0x344) returned 0x1 [0147.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.107] GetFileType (hFile=0x344) returned 0x1 [0147.107] WriteFile (in: hFile=0x344, lpBuffer=0x28f2540*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x28f2540*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.109] CloseHandle (hObject=0x344) returned 1 [0147.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0147.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.111] GetFileType (hFile=0x344) returned 0x1 [0147.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.111] GetFileType (hFile=0x344) returned 0x1 [0147.111] WriteFile (in: hFile=0x344, lpBuffer=0x28f3738*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x28f3738*, lpNumberOfBytesWritten=0x12d948*=0x8e0, lpOverlapped=0x0) returned 1 [0147.113] CloseHandle (hObject=0x344) returned 1 [0147.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0147.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x86 [0147.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5d52f60, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0147.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.114] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk.symmyware")) returned 1 [0147.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0147.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.117] GetFileType (hFile=0x344) returned 0x1 [0147.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.117] GetFileType (hFile=0x344) returned 0x1 [0147.117] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x5ad [0147.118] ReadFile (in: hFile=0x344, lpBuffer=0x28f52a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x28f52a8*, lpNumberOfBytesRead=0x12da38*=0x5ad, lpOverlapped=0x0) returned 1 [0147.119] CloseHandle (hObject=0x344) returned 1 [0147.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0147.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.191] GetFileType (hFile=0x344) returned 0x1 [0147.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.191] GetFileType (hFile=0x344) returned 0x1 [0147.192] WriteFile (in: hFile=0x344, lpBuffer=0x274a5a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x274a5a0*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.193] CloseHandle (hObject=0x344) returned 1 [0147.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0147.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.195] GetFileType (hFile=0x344) returned 0x1 [0147.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.196] GetFileType (hFile=0x344) returned 0x1 [0147.196] WriteFile (in: hFile=0x344, lpBuffer=0x274b7b8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x274b7b8*, lpNumberOfBytesWritten=0x12d948*=0x5b0, lpOverlapped=0x0) returned 1 [0147.197] CloseHandle (hObject=0x344) returned 1 [0147.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0147.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.SYMMYWARE", lpFilePart=0x0) returned 0x8e [0147.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5e1b280, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0147.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.199] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk.symmyware")) returned 1 [0147.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0147.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.204] GetFileType (hFile=0x344) returned 0x1 [0147.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.204] GetFileType (hFile=0x344) returned 0x1 [0147.204] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x5a9 [0147.204] ReadFile (in: hFile=0x344, lpBuffer=0x274d348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x274d348*, lpNumberOfBytesRead=0x12da38*=0x5a9, lpOverlapped=0x0) returned 1 [0147.207] CloseHandle (hObject=0x344) returned 1 [0147.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0147.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.219] GetFileType (hFile=0x344) returned 0x1 [0147.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.219] GetFileType (hFile=0x344) returned 0x1 [0147.219] WriteFile (in: hFile=0x344, lpBuffer=0x27a0740*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x27a0740*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.220] CloseHandle (hObject=0x344) returned 1 [0147.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0147.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.222] GetFileType (hFile=0x344) returned 0x1 [0147.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.222] GetFileType (hFile=0x344) returned 0x1 [0147.222] WriteFile (in: hFile=0x344, lpBuffer=0x27a1948*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x27a1948*, lpNumberOfBytesWritten=0x12d948*=0x5b0, lpOverlapped=0x0) returned 1 [0147.223] CloseHandle (hObject=0x344) returned 1 [0147.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0147.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x8a [0147.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5e5aa20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0147.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.symmyware")) returned 1 [0147.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0147.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.226] GetFileType (hFile=0x344) returned 0x1 [0147.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.226] GetFileType (hFile=0x344) returned 0x1 [0147.226] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x491 [0147.226] ReadFile (in: hFile=0x344, lpBuffer=0x27a3398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x27a3398*, lpNumberOfBytesRead=0x12da38*=0x491, lpOverlapped=0x0) returned 1 [0147.227] CloseHandle (hObject=0x344) returned 1 [0147.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0147.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.241] GetFileType (hFile=0x344) returned 0x1 [0147.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.241] GetFileType (hFile=0x344) returned 0x1 [0147.241] WriteFile (in: hFile=0x344, lpBuffer=0x27f6050*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x27f6050*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.242] CloseHandle (hObject=0x344) returned 1 [0147.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0147.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.244] GetFileType (hFile=0x344) returned 0x1 [0147.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.244] GetFileType (hFile=0x344) returned 0x1 [0147.244] WriteFile (in: hFile=0x344, lpBuffer=0x27f7248*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x27f7248*, lpNumberOfBytesWritten=0x12d948*=0x4a0, lpOverlapped=0x0) returned 1 [0147.246] CloseHandle (hObject=0x344) returned 1 [0147.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0147.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x88 [0147.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5e90580, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0147.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.247] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.symmyware")) returned 1 [0147.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0147.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.250] GetFileType (hFile=0x344) returned 0x1 [0147.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.250] GetFileType (hFile=0x344) returned 0x1 [0147.250] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x4cc [0147.250] ReadFile (in: hFile=0x344, lpBuffer=0x27f8ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x27f8ce0*, lpNumberOfBytesRead=0x12da38*=0x4cc, lpOverlapped=0x0) returned 1 [0147.251] CloseHandle (hObject=0x344) returned 1 [0147.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0147.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.265] GetFileType (hFile=0x344) returned 0x1 [0147.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.265] GetFileType (hFile=0x344) returned 0x1 [0147.265] WriteFile (in: hFile=0x344, lpBuffer=0x284ba98*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x284ba98*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.267] CloseHandle (hObject=0x344) returned 1 [0147.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0147.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.270] GetFileType (hFile=0x344) returned 0x1 [0147.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.270] GetFileType (hFile=0x344) returned 0x1 [0147.271] WriteFile (in: hFile=0x344, lpBuffer=0x284cca8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x284cca8*, lpNumberOfBytesWritten=0x12d948*=0x4d0, lpOverlapped=0x0) returned 1 [0147.272] CloseHandle (hObject=0x344) returned 1 [0147.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0147.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.SYMMYWARE", lpFilePart=0x0) returned 0x8d [0147.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5ecd610, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0147.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.273] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk.symmyware")) returned 1 [0147.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0147.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.277] GetFileType (hFile=0x344) returned 0x1 [0147.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.277] GetFileType (hFile=0x344) returned 0x1 [0147.277] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x4cc [0147.278] ReadFile (in: hFile=0x344, lpBuffer=0x284e748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x284e748*, lpNumberOfBytesRead=0x12da38*=0x4cc, lpOverlapped=0x0) returned 1 [0147.280] CloseHandle (hObject=0x344) returned 1 [0147.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0147.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.291] GetFileType (hFile=0x344) returned 0x1 [0147.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.292] GetFileType (hFile=0x344) returned 0x1 [0147.292] WriteFile (in: hFile=0x344, lpBuffer=0x28a14f0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x28a14f0*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.293] CloseHandle (hObject=0x344) returned 1 [0147.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0147.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.295] GetFileType (hFile=0x344) returned 0x1 [0147.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.295] GetFileType (hFile=0x344) returned 0x1 [0147.295] WriteFile (in: hFile=0x344, lpBuffer=0x28a26f0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x28a26f0*, lpNumberOfBytesWritten=0x12d948*=0x4d0, lpOverlapped=0x0) returned 1 [0147.296] CloseHandle (hObject=0x344) returned 1 [0147.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0147.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x89 [0147.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5f07f90, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0147.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.297] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.symmyware")) returned 1 [0147.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0147.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.299] GetFileType (hFile=0x344) returned 0x1 [0147.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.299] GetFileType (hFile=0x344) returned 0x1 [0147.299] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x60b [0147.299] ReadFile (in: hFile=0x344, lpBuffer=0x28a42d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x28a42d8*, lpNumberOfBytesRead=0x12da38*=0x60b, lpOverlapped=0x0) returned 1 [0147.300] CloseHandle (hObject=0x344) returned 1 [0147.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0147.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.315] GetFileType (hFile=0x344) returned 0x1 [0147.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.315] GetFileType (hFile=0x344) returned 0x1 [0147.315] WriteFile (in: hFile=0x344, lpBuffer=0x28f76e0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x28f76e0*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.317] CloseHandle (hObject=0x344) returned 1 [0147.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0147.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.319] GetFileType (hFile=0x344) returned 0x1 [0147.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.319] GetFileType (hFile=0x344) returned 0x1 [0147.319] WriteFile (in: hFile=0x344, lpBuffer=0x28f8900*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x28f8900*, lpNumberOfBytesWritten=0x12d948*=0x610, lpOverlapped=0x0) returned 1 [0147.321] CloseHandle (hObject=0x344) returned 1 [0147.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0147.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.SYMMYWARE", lpFilePart=0x0) returned 0x91 [0147.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5f3daf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0147.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.322] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk.symmyware")) returned 1 [0147.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0147.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.326] GetFileType (hFile=0x344) returned 0x1 [0147.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.327] GetFileType (hFile=0x344) returned 0x1 [0147.327] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x60b [0147.327] ReadFile (in: hFile=0x344, lpBuffer=0x28fa508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x28fa508*, lpNumberOfBytesRead=0x12da38*=0x60b, lpOverlapped=0x0) returned 1 [0147.339] CloseHandle (hObject=0x344) returned 1 [0147.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0147.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0147.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.438] GetFileType (hFile=0x344) returned 0x1 [0147.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0147.438] GetFileType (hFile=0x344) returned 0x1 [0147.438] WriteFile (in: hFile=0x344, lpBuffer=0x274d998*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x274d998*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0147.439] CloseHandle (hObject=0x344) returned 1 [0147.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0147.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0147.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0147.442] GetFileType (hFile=0x344) returned 0x1 [0147.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0147.442] GetFileType (hFile=0x344) returned 0x1 [0147.442] WriteFile (in: hFile=0x344, lpBuffer=0x274eba8*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x12d948, lpOverlapped=0x0 | out: lpBuffer=0x274eba8*, lpNumberOfBytesWritten=0x12d948*=0x610, lpOverlapped=0x0) returned 1 [0147.444] CloseHandle (hObject=0x344) returned 1 [0147.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0147.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x8d [0147.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0147.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6062a70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0147.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0147.445] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.symmyware")) returned 1 [0147.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x78 [0147.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.452] GetFileType (hFile=0x344) returned 0x1 [0147.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.452] GetFileType (hFile=0x344) returned 0x1 [0147.453] WriteFile (in: hFile=0x344, lpBuffer=0x2752278*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2752278*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0147.455] CloseHandle (hObject=0x344) returned 1 [0147.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x70 [0147.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0147.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.457] GetFileType (hFile=0x344) returned 0x1 [0147.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0147.458] GetFileType (hFile=0x344) returned 0x1 [0147.458] WriteFile (in: hFile=0x344, lpBuffer=0x27555f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27555f0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0147.460] CloseHandle (hObject=0x344) returned 1 [0147.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x64 [0147.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0147.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.462] GetFileType (hFile=0x344) returned 0x1 [0147.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0147.462] GetFileType (hFile=0x344) returned 0x1 [0147.463] WriteFile (in: hFile=0x344, lpBuffer=0x2758938*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2758938*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0147.465] CloseHandle (hObject=0x344) returned 1 [0147.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0147.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0147.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0147.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0147.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0147.469] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0147.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0147.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0147.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0147.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0147.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.470] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.470] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0147.470] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.471] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0147.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0147.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0147.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0147.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0147.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1 [0147.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1 [0147.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1 [0147.474] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0 [0147.474] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0147.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0147.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0147.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0147.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0147.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.475] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1 [0147.476] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1 [0147.477] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.478] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0147.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0147.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0147.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0147.478] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.480] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.481] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.481] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0147.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0147.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.482] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.482] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.483] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0147.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.484] GetFileType (hFile=0x344) returned 0x1 [0147.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.484] GetFileType (hFile=0x344) returned 0x1 [0147.485] WriteFile (in: hFile=0x344, lpBuffer=0x27645e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x27645e0*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0147.486] CloseHandle (hObject=0x344) returned 1 [0147.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0147.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0147.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.487] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.487] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.488] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0147.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0147.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.489] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.489] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.489] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0147.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.490] GetFileType (hFile=0x344) returned 0x1 [0147.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.491] GetFileType (hFile=0x344) returned 0x1 [0147.491] WriteFile (in: hFile=0x344, lpBuffer=0x2769f88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x2769f88*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0147.493] CloseHandle (hObject=0x344) returned 1 [0147.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0147.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0147.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.495] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.495] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0147.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0147.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.496] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.496] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.497] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0147.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.498] GetFileType (hFile=0x344) returned 0x1 [0147.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.498] GetFileType (hFile=0x344) returned 0x1 [0147.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0147.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0147.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.500] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0147.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0147.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0147.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0147.501] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.502] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.502] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0147.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0147.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0147.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0147.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0147.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0147.503] GetFileType (hFile=0x344) returned 0x1 [0147.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0147.503] GetFileType (hFile=0x344) returned 0x1 [0147.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x64 [0147.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0147.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.431] GetFileType (hFile=0x344) returned 0x1 [0148.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0148.431] GetFileType (hFile=0x344) returned 0x1 [0148.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0148.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.434] GetFileType (hFile=0x344) returned 0x1 [0148.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.434] GetFileType (hFile=0x344) returned 0x1 [0148.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0148.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.436] GetFileType (hFile=0x344) returned 0x1 [0148.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.437] GetFileType (hFile=0x344) returned 0x1 [0148.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0148.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0148.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.439] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0148.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0148.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.441] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x49 [0148.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.442] GetFileType (hFile=0x344) returned 0x1 [0148.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.442] GetFileType (hFile=0x344) returned 0x1 [0148.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0148.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0148.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0148.447] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0148.447] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0148.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0148.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0148.449] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.449] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0148.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0148.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0148.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0148.451] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0148.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0148.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0148.452] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.453] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0148.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0148.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0148.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.454] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.454] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0148.454] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.455] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0148.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0148.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0148.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0148.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0148.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.455] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0148.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0 [0148.456] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0148.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0148.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0148.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0148.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.457] GetFileType (hFile=0x344) returned 0x1 [0148.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0148.457] GetFileType (hFile=0x344) returned 0x1 [0148.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0148.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.459] GetFileType (hFile=0x344) returned 0x1 [0148.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.459] GetFileType (hFile=0x344) returned 0x1 [0148.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0148.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.461] GetFileType (hFile=0x344) returned 0x1 [0148.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.461] GetFileType (hFile=0x344) returned 0x1 [0148.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0148.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0148.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0148.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0148.464] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0148.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0148.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0148.465] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.466] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0148.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0148.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.466] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.467] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0148.467] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0 [0148.467] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0148.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0148.467] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0148.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.468] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0148.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0148.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0148.470] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0148.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0148.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0148.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0148.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0148.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.470] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.471] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0148.471] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.471] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0148.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0148.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0148.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0148.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0148.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0148.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.472] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0148.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0148.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0148.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0148.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0148.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0148.473] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0148.474] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0148.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0148.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x68 [0148.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0148.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.475] GetFileType (hFile=0x344) returned 0x1 [0148.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0148.475] GetFileType (hFile=0x344) returned 0x1 [0148.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0148.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0148.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.477] GetFileType (hFile=0x344) returned 0x1 [0148.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0148.478] GetFileType (hFile=0x344) returned 0x1 [0148.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0148.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.480] GetFileType (hFile=0x344) returned 0x1 [0148.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.480] GetFileType (hFile=0x344) returned 0x1 [0148.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0148.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.482] GetFileType (hFile=0x344) returned 0x1 [0148.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.482] GetFileType (hFile=0x344) returned 0x1 [0148.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0148.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0148.484] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0148.523] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0148.523] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0148.523] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0148.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0148.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0148.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0148.524] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.525] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0148.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0148.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.526] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0148.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0148.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0148.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.527] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0148.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0148.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0148.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0148.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0148.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0148.529] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0148.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.533] GetFileType (hFile=0x344) returned 0x1 [0148.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.533] GetFileType (hFile=0x344) returned 0x1 [0148.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0148.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.535] GetFileType (hFile=0x344) returned 0x1 [0148.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.536] GetFileType (hFile=0x344) returned 0x1 [0148.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0148.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0148.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.539] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0148.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0148.540] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.540] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0148.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0148.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.541] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0148.542] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0148.542] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0148.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0148.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0148.543] GetFileType (hFile=0x344) returned 0x1 [0148.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0148.543] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x9a2 [0148.543] ReadFile (in: hFile=0x344, lpBuffer=0x27bae88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27bae88*, lpNumberOfBytesRead=0x12dbb8*=0x9a2, lpOverlapped=0x0) returned 1 [0148.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0148.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0148.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0148.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0148.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0148.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0148.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0148.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0148.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.SYMMYWARE", lpFilePart=0x0) returned 0x55 [0148.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6b1acb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0148.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0148.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.symmyware")) returned 1 [0148.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0148.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0148.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0148.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.643] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.644] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.644] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0148.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0148.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.645] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.649] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.649] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x50 [0148.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0148.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0148.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.761] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.790] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.791] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0148.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0148.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.792] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.792] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0148.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.794] GetFileType (hFile=0x344) returned 0x1 [0148.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.794] GetFileType (hFile=0x344) returned 0x1 [0148.795] WriteFile (in: hFile=0x344, lpBuffer=0x281e1c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x281e1c0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0148.796] CloseHandle (hObject=0x344) returned 1 [0148.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0148.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0148.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0148.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0148.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0148.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0148.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.799] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0148.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0148.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.806] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.806] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0148.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0148.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0148.807] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0148.808] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0148.808] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0148.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0148.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0148.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0148.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.867] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0148.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0148.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0148.881] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7b [0148.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.884] GetFileType (hFile=0x344) returned 0x1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.884] GetFileType (hFile=0x344) returned 0x1 [0148.885] WriteFile (in: hFile=0x344, lpBuffer=0x2827e60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2827e60*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0148.886] CloseHandle (hObject=0x344) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0148.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0148.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1 [0148.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1 [0148.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1 [0148.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1 [0148.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="915f9e3b-485d-4f89-a291-82a5ad3b0ee7", cAlternateFileName="915F9E~1")) returned 1 [0148.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1 [0148.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0148.924] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.924] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0148.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0148.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0148.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0148.926] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1 [0148.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1 [0148.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1 [0148.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1 [0148.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="915f9e3b-485d-4f89-a291-82a5ad3b0ee7", cAlternateFileName="915F9E~1")) returned 1 [0148.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1 [0148.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0148.929] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0148.930] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0148.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0148.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0148.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7c [0148.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0148.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.932] GetFileType (hFile=0x344) returned 0x1 [0148.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0148.933] GetFileType (hFile=0x344) returned 0x1 [0148.933] WriteFile (in: hFile=0x344, lpBuffer=0x2830ad0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2830ad0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0148.935] CloseHandle (hObject=0x344) returned 1 [0148.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0148.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0148.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0148.937] GetFileType (hFile=0x344) returned 0x1 [0148.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0148.937] GetFileType (hFile=0x344) returned 0x1 [0148.939] WriteFile (in: hFile=0x344, lpBuffer=0x2833db8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2833db8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0148.940] CloseHandle (hObject=0x344) returned 1 [0148.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0148.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0148.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0148.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.012] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0149.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0149.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.013] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.013] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0149.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.014] GetFileType (hFile=0x344) returned 0x1 [0149.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.014] GetFileType (hFile=0x344) returned 0x1 [0149.015] WriteFile (in: hFile=0x344, lpBuffer=0x28390a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x28390a0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0149.016] CloseHandle (hObject=0x344) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0149.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0149.039] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.039] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0149.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0149.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0149.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0 [0149.041] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0149.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.043] GetFileType (hFile=0x344) returned 0x1 [0149.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0149.044] GetFileType (hFile=0x344) returned 0x1 [0149.044] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xa8 [0149.044] ReadFile (in: hFile=0x344, lpBuffer=0x283cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x283cc68*, lpNumberOfBytesRead=0x12dbb8*=0xa8, lpOverlapped=0x0) returned 1 [0149.045] CloseHandle (hObject=0x344) returned 1 [0149.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0149.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0149.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.100] GetFileType (hFile=0x344) returned 0x1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0149.100] GetFileType (hFile=0x344) returned 0x1 [0149.101] WriteFile (in: hFile=0x344, lpBuffer=0x288e438*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x288e438*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0149.102] CloseHandle (hObject=0x344) returned 1 [0149.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0149.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.103] GetFileType (hFile=0x344) returned 0x1 [0149.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0149.104] GetFileType (hFile=0x344) returned 0x1 [0149.104] WriteFile (in: hFile=0x344, lpBuffer=0x288f5f8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x12dac8, lpOverlapped=0x0 | out: lpBuffer=0x288f5f8*, lpNumberOfBytesWritten=0x12dac8*=0xb0, lpOverlapped=0x0) returned 1 [0149.105] CloseHandle (hObject=0x344) returned 1 [0149.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0149.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.SYMMYWARE", lpFilePart=0x0) returned 0x6c [0149.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0149.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x6f4d030, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0149.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0149.105] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.symmyware")) returned 1 [0149.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5f [0149.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.107] GetFileType (hFile=0x344) returned 0x1 [0149.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.108] GetFileType (hFile=0x344) returned 0x1 [0149.108] WriteFile (in: hFile=0x344, lpBuffer=0x2892b98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2892b98*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0149.110] CloseHandle (hObject=0x344) returned 1 [0149.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0149.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0149.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.111] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.111] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.111] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0149.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0149.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.113] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0149.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.114] GetFileType (hFile=0x344) returned 0x1 [0149.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.114] GetFileType (hFile=0x344) returned 0x1 [0149.115] WriteFile (in: hFile=0x344, lpBuffer=0x2897e20*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2897e20*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0149.116] CloseHandle (hObject=0x344) returned 1 [0149.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0149.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0149.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0149.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0149.118] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0149.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0149.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.119] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0149.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0149.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0149.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0149.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0149.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0149.158] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0149.159] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0149.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0149.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0149.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0149.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0149.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.159] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0149.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0149.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0149.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.161] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0149.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0149.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0149.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0149.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.163] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0149.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0149.163] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.165] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x68 [0149.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0149.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0149.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0149.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0149.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.170] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0149.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0149.171] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.171] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.171] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.171] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0149.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0149.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0149.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0149.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.175] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.175] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.175] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0149.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0149.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0149.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.177] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0149.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0149.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0149.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0149.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5b [0149.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0149.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0149.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0149.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0149.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0149.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0149.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.186] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0149.187] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.187] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0149.188] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0149.189] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4f [0149.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0149.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0149.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0149.194] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.195] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0149.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0149.196] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0149.197] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4c [0149.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0149.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0149.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.209] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0149.210] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0149.210] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0149.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0149.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.211] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0149.212] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.212] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0149.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0149.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0149.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0149.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0149.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.214] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.215] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0149.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0149.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0149.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0149.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0149.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.217] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0149.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0149.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0149.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0149.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0149.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0149.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0149.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0149.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0149.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0149.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0149.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0149.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.225] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.225] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0149.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0149.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 0 [0149.227] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0149.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0149.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0149.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0149.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0149.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0149.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0149.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.229] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0149.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0149.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0149.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0149.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.232] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0149.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0149.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.233] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0149.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0149.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0149.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0149.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0149.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0149.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.239] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0149.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0149.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0149.240] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0149.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0149.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 0 [0149.241] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0149.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0149.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1 [0149.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.245] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0149.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0149.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1 [0149.246] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 0 [0149.246] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x59 [0149.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0149.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.250] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0149.251] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0149.252] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0149.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0149.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.252] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0149.253] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.253] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0149.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0149.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.264] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0149.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0149.271] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0149.272] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0149.273] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.274] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0149.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0149.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0149.277] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0149.278] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0149.279] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0149.280] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0 [0149.280] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0149.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.283] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xfde [0149.283] ReadFile (in: hFile=0x344, lpBuffer=0x28ec7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x28ec7d8*, lpNumberOfBytesRead=0x12dab8*=0xfde, lpOverlapped=0x0) returned 1 [0149.285] CloseHandle (hObject=0x344) returned 1 [0149.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0149.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0149.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.413] GetFileType (hFile=0x344) returned 0x1 [0149.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0149.413] GetFileType (hFile=0x344) returned 0x1 [0149.413] WriteFile (in: hFile=0x344, lpBuffer=0x2743320*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x2743320*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0149.414] CloseHandle (hObject=0x344) returned 1 [0149.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0149.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0149.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.416] GetFileType (hFile=0x344) returned 0x1 [0149.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0149.416] GetFileType (hFile=0x344) returned 0x1 [0149.416] WriteFile (in: hFile=0x344, lpBuffer=0x27444d0*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x27444d0*, lpNumberOfBytesWritten=0x12d9c8*=0xfe0, lpOverlapped=0x0) returned 1 [0149.417] CloseHandle (hObject=0x344) returned 1 [0149.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js", lpFilePart=0x0) returned 0x60 [0149.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.SYMMYWARE", lpFilePart=0x0) returned 0x6a [0149.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7230c20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0149.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0149.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.symmyware")) returned 1 [0149.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0149.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0149.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.420] GetFileType (hFile=0x344) returned 0x1 [0149.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0149.420] GetFileType (hFile=0x344) returned 0x1 [0149.420] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0xbc5 [0149.420] ReadFile (in: hFile=0x344, lpBuffer=0x27465c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x27465c0*, lpNumberOfBytesRead=0x12dab8*=0xbc5, lpOverlapped=0x0) returned 1 [0149.424] CloseHandle (hObject=0x344) returned 1 [0149.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0149.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0149.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.434] GetFileType (hFile=0x344) returned 0x1 [0149.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0149.434] GetFileType (hFile=0x344) returned 0x1 [0149.434] WriteFile (in: hFile=0x344, lpBuffer=0x279b818*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x279b818*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0149.436] CloseHandle (hObject=0x344) returned 1 [0149.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0149.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0149.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.437] GetFileType (hFile=0x344) returned 0x1 [0149.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0149.437] GetFileType (hFile=0x344) returned 0x1 [0149.437] WriteFile (in: hFile=0x344, lpBuffer=0x279c9d8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x12d9c8, lpOverlapped=0x0 | out: lpBuffer=0x279c9d8*, lpNumberOfBytesWritten=0x12d9c8*=0xbd0, lpOverlapped=0x0) returned 1 [0149.438] CloseHandle (hObject=0x344) returned 1 [0149.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js", lpFilePart=0x0) returned 0x67 [0149.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.SYMMYWARE", lpFilePart=0x0) returned 0x71 [0149.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7264070, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0149.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0149.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.symmyware")) returned 1 [0149.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0149.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0149.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0149.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0149.451] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.452] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0149.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0149.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.454] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.455] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0149.455] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0149.455] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 0 [0149.455] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x75 [0149.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0149.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.461] GetFileType (hFile=0x344) returned 0x1 [0149.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0149.461] GetFileType (hFile=0x344) returned 0x1 [0149.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0149.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0149.463] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0149.468] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0 [0149.468] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0149.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0149.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0149.469] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.469] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0149.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0149.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0149.470] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.470] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.471] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0149.471] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0149.471] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0 [0149.471] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0149.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0149.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0149.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0149.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0149.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0149.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0149.472] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.473] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0149.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0149.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0149.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0149.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0149.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.481] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.482] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0149.482] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0149.482] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.482] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0149.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0149.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0149.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0149.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x12d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0149.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x12d690 | out: lpFindFileData=0x12d690*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.484] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.485] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0149.485] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0149.485] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d6e0 | out: lpFindFileData=0x12d6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0 [0149.485] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d940) returned 1 [0149.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d900) returned 1 [0149.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0149.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0149.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0149.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.489] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.490] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.490] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0149.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0149.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x12d400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0149.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x12d610 | out: lpFindFileData=0x12d610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.491] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.491] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d660 | out: lpFindFileData=0x12d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.491] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8c0) returned 1 [0149.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d880) returned 1 [0149.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x9a [0149.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d7c0) returned 1 [0149.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.493] GetFileType (hFile=0x344) returned 0x1 [0149.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d730) returned 1 [0149.493] GetFileType (hFile=0x344) returned 0x1 [0149.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x87 [0149.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d840) returned 1 [0149.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.496] GetFileType (hFile=0x344) returned 0x1 [0149.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7b0) returned 1 [0149.496] GetFileType (hFile=0x344) returned 0x1 [0149.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x83 [0149.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0149.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.499] GetFileType (hFile=0x344) returned 0x1 [0149.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0149.499] GetFileType (hFile=0x344) returned 0x1 [0149.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6f [0149.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0149.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.503] GetFileType (hFile=0x344) returned 0x1 [0149.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0149.503] GetFileType (hFile=0x344) returned 0x1 [0149.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0149.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0149.505] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.508] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0149.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0149.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.510] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.511] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0149.511] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6f [0149.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0149.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.513] GetFileType (hFile=0x344) returned 0x1 [0149.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0149.513] GetFileType (hFile=0x344) returned 0x1 [0149.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0149.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0149.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.517] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0149.518] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.518] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0149.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0149.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0149.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0149.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0 [0149.521] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0149.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0149.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6d [0149.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0149.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.522] GetFileType (hFile=0x344) returned 0x1 [0149.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0149.523] GetFileType (hFile=0x344) returned 0x1 [0149.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0149.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0149.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.525] GetFileType (hFile=0x344) returned 0x1 [0149.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0149.525] GetFileType (hFile=0x344) returned 0x1 [0149.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x54 [0149.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0149.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.528] GetFileType (hFile=0x344) returned 0x1 [0149.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0149.528] GetFileType (hFile=0x344) returned 0x1 [0149.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0149.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0149.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.530] GetFileType (hFile=0x344) returned 0x1 [0149.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0149.531] GetFileType (hFile=0x344) returned 0x1 [0149.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0149.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0149.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.533] GetFileType (hFile=0x344) returned 0x1 [0149.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0149.533] GetFileType (hFile=0x344) returned 0x1 [0149.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3b [0149.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0149.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.550] GetFileType (hFile=0x344) returned 0x1 [0149.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0149.551] GetFileType (hFile=0x344) returned 0x1 [0149.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0149.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0149.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.556] GetFileType (hFile=0x344) returned 0x1 [0149.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0149.556] GetFileType (hFile=0x344) returned 0x1 [0149.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0149.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", lpFilePart=0x0) returned 0x2f [0149.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0149.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0149.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0149.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0149.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.569] GetFileType (hFile=0x344) returned 0x1 [0149.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0149.569] GetFileType (hFile=0x344) returned 0x1 [0149.571] WriteFile (in: hFile=0x344, lpBuffer=0x27e00c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27e00c0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0149.572] CloseHandle (hObject=0x344) returned 1 [0149.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0149.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0149.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.575] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.576] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0149.576] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0149.577] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0149.577] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0149.577] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.578] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0149.578] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0149.579] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.579] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0149.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0149.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0149.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0149.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.580] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.580] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0149.581] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0149.581] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0149.583] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0149.583] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0149.583] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0149.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0149.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0149.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0149.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.584] GetFileType (hFile=0x344) returned 0x1 [0149.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0149.585] GetFileType (hFile=0x344) returned 0x1 [0149.585] WriteFile (in: hFile=0x344, lpBuffer=0x27e6b38*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27e6b38*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0149.587] CloseHandle (hObject=0x344) returned 1 [0149.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0149.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", lpFilePart=0x0) returned 0x26 [0149.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0149.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0149.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0149.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0149.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.594] GetFileType (hFile=0x344) returned 0x1 [0149.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0149.594] GetFileType (hFile=0x344) returned 0x1 [0149.594] WriteFile (in: hFile=0x344, lpBuffer=0x27eb0c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27eb0c0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0149.596] CloseHandle (hObject=0x344) returned 1 [0149.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0149.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0149.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="29yJ2f0n", cAlternateFileName="")) returned 1 [0149.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4qmNmCzcsh8uy0HQiw-_", cAlternateFileName="4QMNMC~1")) returned 1 [0149.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6UbGEc4xt0Gd4lUKNaGp", cAlternateFileName="6UBGEC~1")) returned 1 [0149.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd93350, ftCreationTime.dwHighDateTime=0x1d5e150, ftLastAccessTime.dwLowDateTime=0xc6c38c60, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0xc6c38c60, ftLastWriteTime.dwHighDateTime=0x1d5d946, nFileSizeHigh=0x0, nFileSizeLow=0x1767e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bTp5b89p9.xlsx", cAlternateFileName="BTP5B8~1.XLS")) returned 1 [0149.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcfa4bb0, ftCreationTime.dwHighDateTime=0x1d5d9d5, ftLastAccessTime.dwLowDateTime=0x1d639050, ftLastAccessTime.dwHighDateTime=0x1d5e0be, ftLastWriteTime.dwLowDateTime=0x1d639050, ftLastWriteTime.dwHighDateTime=0x1d5e0be, nFileSizeHigh=0x0, nFileSizeLow=0x3262, dwReserved0=0x0, dwReserved1=0x0, cFileName="cuY GF1NUKy983.swf", cAlternateFileName="CUYGF1~1.SWF")) returned 1 [0149.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bbac50, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0xf0aed040, ftLastAccessTime.dwHighDateTime=0x1d5e515, ftLastWriteTime.dwLowDateTime=0xf0aed040, ftLastWriteTime.dwHighDateTime=0x1d5e515, nFileSizeHigh=0x0, nFileSizeLow=0x11edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dBRzuL8XOgEfYA7s.m4a", cAlternateFileName="DBRZUL~1.M4A")) returned 1 [0149.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2cf8820, ftCreationTime.dwHighDateTime=0x1d5e5c4, ftLastAccessTime.dwLowDateTime=0xaa1aa850, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xaa1aa850, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x109aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="e6bFv 8H29i-.m4a", cAlternateFileName="E6BFV8~1.M4A")) returned 1 [0149.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6e48c0, ftCreationTime.dwHighDateTime=0x1d5e04a, ftLastAccessTime.dwLowDateTime=0xe08cb1d0, ftLastAccessTime.dwHighDateTime=0x1d5e4b8, ftLastWriteTime.dwLowDateTime=0xe08cb1d0, ftLastWriteTime.dwHighDateTime=0x1d5e4b8, nFileSizeHigh=0x0, nFileSizeLow=0x1c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="evRF86F.m4a", cAlternateFileName="")) returned 1 [0149.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfdc530, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x787b9700, ftLastAccessTime.dwHighDateTime=0x1d5e2d3, ftLastWriteTime.dwLowDateTime=0x787b9700, ftLastWriteTime.dwHighDateTime=0x1d5e2d3, nFileSizeHigh=0x0, nFileSizeLow=0x826, dwReserved0=0x0, dwReserved1=0x0, cFileName="E_hSJDvcisFP.mp3", cAlternateFileName="E_HSJD~1.MP3")) returned 1 [0149.601] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8308830, ftCreationTime.dwHighDateTime=0x1d5e47c, ftLastAccessTime.dwLowDateTime=0xf2f00830, ftLastAccessTime.dwHighDateTime=0x1d5dcc6, ftLastWriteTime.dwLowDateTime=0xf2f00830, ftLastWriteTime.dwHighDateTime=0x1d5dcc6, nFileSizeHigh=0x0, nFileSizeLow=0x15b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="fUVobdXLFQcXGajtKuSb.pptx", cAlternateFileName="FUVOBD~1.PPT")) returned 1 [0149.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb3bcc40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3e2da0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hyBrDFjOidLuty.exe", cAlternateFileName="HYBRDF~1.EXE")) returned 1 [0149.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec97d0, ftCreationTime.dwHighDateTime=0x1d5e59a, ftLastAccessTime.dwLowDateTime=0x9c4f0aa0, ftLastAccessTime.dwHighDateTime=0x1d5e539, ftLastWriteTime.dwLowDateTime=0x9c4f0aa0, ftLastWriteTime.dwHighDateTime=0x1d5e539, nFileSizeHigh=0x0, nFileSizeLow=0x1070a, dwReserved0=0x0, dwReserved1=0x0, cFileName="In48QMtiqzJKxkMmi0_0.bmp", cAlternateFileName="IN48QM~1.BMP")) returned 1 [0149.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428cd190, ftCreationTime.dwHighDateTime=0x1d5e535, ftLastAccessTime.dwLowDateTime=0x15fa2170, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0x15fa2170, ftLastWriteTime.dwHighDateTime=0x1d5df66, nFileSizeHigh=0x0, nFileSizeLow=0x14e3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqRVKXHeLsTD3ACiwQ.xlsx", cAlternateFileName="JQRVKX~1.XLS")) returned 1 [0149.602] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d89110, ftCreationTime.dwHighDateTime=0x1d5df01, ftLastAccessTime.dwLowDateTime=0xbe4cba70, ftLastAccessTime.dwHighDateTime=0x1d5e6bb, ftLastWriteTime.dwLowDateTime=0xbe4cba70, ftLastWriteTime.dwHighDateTime=0x1d5e6bb, nFileSizeHigh=0x0, nFileSizeLow=0x3c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="keQ8zm0r3k8.m4a", cAlternateFileName="KEQ8ZM~1.M4A")) returned 1 [0149.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502ca170, ftCreationTime.dwHighDateTime=0x1d5e29e, ftLastAccessTime.dwLowDateTime=0xcc697c00, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0xcc697c00, ftLastWriteTime.dwHighDateTime=0x1d5de51, nFileSizeHigh=0x0, nFileSizeLow=0x14e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lS93GNjO1xhUD.csv", cAlternateFileName="LS93GN~1.CSV")) returned 1 [0149.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599685f0, ftCreationTime.dwHighDateTime=0x1d5da0b, ftLastAccessTime.dwLowDateTime=0xbfab2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0xbfab2ff0, ftLastWriteTime.dwHighDateTime=0x1d5e300, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5t_dUkYl.m4a", cAlternateFileName="O5T_DU~1.M4A")) returned 1 [0149.603] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9040b0, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0x4519320, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0x4519320, ftLastWriteTime.dwHighDateTime=0x1d5db71, nFileSizeHigh=0x0, nFileSizeLow=0x4a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oRiB96Q9shvBCOjF.avi", cAlternateFileName="ORIB96~1.AVI")) returned 1 [0149.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb370980, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb370980, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb396ae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x52c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PsExec.exe", cAlternateFileName="")) returned 1 [0149.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b287e0, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcb6dc130, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0xcb6dc130, ftLastWriteTime.dwHighDateTime=0x1d5e162, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="QAyhrze.pptx", cAlternateFileName="QAYHRZ~1.PPT")) returned 1 [0149.604] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba70c70, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0xb350aa90, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0xb350aa90, ftLastWriteTime.dwHighDateTime=0x1d5db81, nFileSizeHigh=0x0, nFileSizeLow=0xe602, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qloo57h4ZKuf1jhmtGy.png", cAlternateFileName="QLOO57~1.PNG")) returned 1 [0149.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80644780, ftCreationTime.dwHighDateTime=0x1d5e087, ftLastAccessTime.dwLowDateTime=0xf7bb01a0, ftLastAccessTime.dwHighDateTime=0x1d5e093, ftLastWriteTime.dwLowDateTime=0xf7bb01a0, ftLastWriteTime.dwHighDateTime=0x1d5e093, nFileSizeHigh=0x0, nFileSizeLow=0x13c2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="QoiJk.wav", cAlternateFileName="")) returned 1 [0149.605] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5e4c60, ftCreationTime.dwHighDateTime=0x1d5dbf2, ftLastAccessTime.dwLowDateTime=0x849104e0, ftLastAccessTime.dwHighDateTime=0x1d5e4f3, ftLastWriteTime.dwLowDateTime=0x849104e0, ftLastWriteTime.dwHighDateTime=0x1d5e4f3, nFileSizeHigh=0x0, nFileSizeLow=0xb1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="S0AtNwEYEOZZiI.mp4", cAlternateFileName="S0ATNW~1.MP4")) returned 1 [0149.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4dba040, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x4b1d580, ftLastAccessTime.dwHighDateTime=0x1d5e3ca, ftLastWriteTime.dwLowDateTime=0x4b1d580, ftLastWriteTime.dwHighDateTime=0x1d5e3ca, nFileSizeHigh=0x0, nFileSizeLow=0x68a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHo_eq8P8lTDYZ hjr.pptx", cAlternateFileName="SHO_EQ~1.PPT")) returned 1 [0149.606] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf863f570, ftCreationTime.dwHighDateTime=0x1d5e4bd, ftLastAccessTime.dwLowDateTime=0xbdc830a0, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0xbdc830a0, ftLastWriteTime.dwHighDateTime=0x1d5dff6, nFileSizeHigh=0x0, nFileSizeLow=0x18a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnBdN2.pptx", cAlternateFileName="TNBDN2~1.PPT")) returned 1 [0149.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66da28e0, ftCreationTime.dwHighDateTime=0x1d5e616, ftLastAccessTime.dwLowDateTime=0xf245f6f0, ftLastAccessTime.dwHighDateTime=0x1d5d920, ftLastWriteTime.dwLowDateTime=0xf245f6f0, ftLastWriteTime.dwHighDateTime=0x1d5d920, nFileSizeHigh=0x0, nFileSizeLow=0xfc1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="u8QEkqZ.xls", cAlternateFileName="")) returned 1 [0149.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55b704c0, ftCreationTime.dwHighDateTime=0x1d5d83d, ftLastAccessTime.dwLowDateTime=0x429c0d50, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0x429c0d50, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0x10089, dwReserved0=0x0, dwReserved1=0x0, cFileName="unVckZQ.wav", cAlternateFileName="")) returned 1 [0149.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923e6e0, ftCreationTime.dwHighDateTime=0x1d5df89, ftLastAccessTime.dwLowDateTime=0xe1be5e20, ftLastAccessTime.dwHighDateTime=0x1d5e2c2, ftLastWriteTime.dwLowDateTime=0xe1be5e20, ftLastWriteTime.dwHighDateTime=0x1d5e2c2, nFileSizeHigh=0x0, nFileSizeLow=0x54da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vs OqL88fs J.pptx", cAlternateFileName="VSOQL8~1.PPT")) returned 1 [0149.607] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838533e0, ftCreationTime.dwHighDateTime=0x1d5dcd4, ftLastAccessTime.dwLowDateTime=0x71882d30, ftLastAccessTime.dwHighDateTime=0x1d5dc72, ftLastWriteTime.dwLowDateTime=0x71882d30, ftLastWriteTime.dwHighDateTime=0x1d5dc72, nFileSizeHigh=0x0, nFileSizeLow=0xa064, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wzyx_q.ppt", cAlternateFileName="")) returned 1 [0149.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7afa00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xcd7afa00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe67fad00, ftLastWriteTime.dwHighDateTime=0x1d6973b, nFileSizeHigh=0x0, nFileSizeLow=0x69640, dwReserved0=0x0, dwReserved1=0x0, cFileName="x22p4FOu0H3dU8Or.exe", cAlternateFileName="X22P4F~1.EXE")) returned 1 [0149.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bcb380, ftCreationTime.dwHighDateTime=0x1d5deba, ftLastAccessTime.dwLowDateTime=0x6e7d5d80, ftLastAccessTime.dwHighDateTime=0x1d5dd8b, ftLastWriteTime.dwLowDateTime=0x6e7d5d80, ftLastWriteTime.dwHighDateTime=0x1d5dd8b, nFileSizeHigh=0x0, nFileSizeLow=0x95a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="X6jjMGg6b2.ots", cAlternateFileName="X6JJMG~1.OTS")) returned 1 [0149.608] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cae3f0, ftCreationTime.dwHighDateTime=0x1d5dd02, ftLastAccessTime.dwLowDateTime=0x46733ab0, ftLastAccessTime.dwHighDateTime=0x1d5d8d8, ftLastWriteTime.dwLowDateTime=0x46733ab0, ftLastWriteTime.dwHighDateTime=0x1d5d8d8, nFileSizeHigh=0x0, nFileSizeLow=0x5d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xhi R8xI-CS6T-C04 o.wav", cAlternateFileName="XHIR8X~1.WAV")) returned 1 [0149.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ac87f20, ftCreationTime.dwHighDateTime=0x1d5e801, ftLastAccessTime.dwLowDateTime=0x97e95fd0, ftLastAccessTime.dwHighDateTime=0x1d5dd94, ftLastWriteTime.dwLowDateTime=0x97e95fd0, ftLastWriteTime.dwHighDateTime=0x1d5dd94, nFileSizeHigh=0x0, nFileSizeLow=0x8820, dwReserved0=0x0, dwReserved1=0x0, cFileName="yh6lbF sEgK4-KgFYpaH.pps", cAlternateFileName="YH6LBF~1.PPS")) returned 1 [0149.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1399b00, ftCreationTime.dwHighDateTime=0x1d5da55, ftLastAccessTime.dwLowDateTime=0x93efdd00, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x93efdd00, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x15ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ JUgTFvdw2L50UZoSQD.swf", cAlternateFileName="_JUGTF~1.SWF")) returned 1 [0149.609] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2f95a0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x445c2190, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x445c2190, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x10ecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_567I8.png", cAlternateFileName="")) returned 1 [0149.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a656b0, ftCreationTime.dwHighDateTime=0x1d5dd07, ftLastAccessTime.dwLowDateTime=0x8afdf5d0, ftLastAccessTime.dwHighDateTime=0x1d5dd4c, ftLastWriteTime.dwLowDateTime=0x8afdf5d0, ftLastWriteTime.dwHighDateTime=0x1d5dd4c, nFileSizeHigh=0x0, nFileSizeLow=0x4f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="_gKXHII6BC_F8dMlKrC.png", cAlternateFileName="_GKXHI~1.PNG")) returned 1 [0149.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1497ee0, ftCreationTime.dwHighDateTime=0x1d5dd9c, ftLastAccessTime.dwLowDateTime=0x35865f0, ftLastAccessTime.dwHighDateTime=0x1d5dcf9, ftLastWriteTime.dwLowDateTime=0x35865f0, ftLastWriteTime.dwHighDateTime=0x1d5dcf9, nFileSizeHigh=0x0, nFileSizeLow=0x1e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="_m_LxZ-lI5fbPZDE.bmp", cAlternateFileName="_M_LXZ~1.BMP")) returned 1 [0149.610] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.611] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0149.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0149.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0149.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0149.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0149.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0149.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3bcc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="29yJ2f0n", cAlternateFileName="")) returned 1 [0149.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4qmNmCzcsh8uy0HQiw-_", cAlternateFileName="4QMNMC~1")) returned 1 [0149.612] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6UbGEc4xt0Gd4lUKNaGp", cAlternateFileName="6UBGEC~1")) returned 1 [0149.613] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd93350, ftCreationTime.dwHighDateTime=0x1d5e150, ftLastAccessTime.dwLowDateTime=0xc6c38c60, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0xc6c38c60, ftLastWriteTime.dwHighDateTime=0x1d5d946, nFileSizeHigh=0x0, nFileSizeLow=0x1767e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bTp5b89p9.xlsx", cAlternateFileName="BTP5B8~1.XLS")) returned 1 [0149.613] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcfa4bb0, ftCreationTime.dwHighDateTime=0x1d5d9d5, ftLastAccessTime.dwLowDateTime=0x1d639050, ftLastAccessTime.dwHighDateTime=0x1d5e0be, ftLastWriteTime.dwLowDateTime=0x1d639050, ftLastWriteTime.dwHighDateTime=0x1d5e0be, nFileSizeHigh=0x0, nFileSizeLow=0x3262, dwReserved0=0x0, dwReserved1=0x0, cFileName="cuY GF1NUKy983.swf", cAlternateFileName="CUYGF1~1.SWF")) returned 1 [0149.613] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bbac50, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0xf0aed040, ftLastAccessTime.dwHighDateTime=0x1d5e515, ftLastWriteTime.dwLowDateTime=0xf0aed040, ftLastWriteTime.dwHighDateTime=0x1d5e515, nFileSizeHigh=0x0, nFileSizeLow=0x11edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dBRzuL8XOgEfYA7s.m4a", cAlternateFileName="DBRZUL~1.M4A")) returned 1 [0149.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2cf8820, ftCreationTime.dwHighDateTime=0x1d5e5c4, ftLastAccessTime.dwLowDateTime=0xaa1aa850, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0xaa1aa850, ftLastWriteTime.dwHighDateTime=0x1d5df27, nFileSizeHigh=0x0, nFileSizeLow=0x109aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="e6bFv 8H29i-.m4a", cAlternateFileName="E6BFV8~1.M4A")) returned 1 [0149.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6e48c0, ftCreationTime.dwHighDateTime=0x1d5e04a, ftLastAccessTime.dwLowDateTime=0xe08cb1d0, ftLastAccessTime.dwHighDateTime=0x1d5e4b8, ftLastWriteTime.dwLowDateTime=0xe08cb1d0, ftLastWriteTime.dwHighDateTime=0x1d5e4b8, nFileSizeHigh=0x0, nFileSizeLow=0x1c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="evRF86F.m4a", cAlternateFileName="")) returned 1 [0149.614] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfdc530, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x787b9700, ftLastAccessTime.dwHighDateTime=0x1d5e2d3, ftLastWriteTime.dwLowDateTime=0x787b9700, ftLastWriteTime.dwHighDateTime=0x1d5e2d3, nFileSizeHigh=0x0, nFileSizeLow=0x826, dwReserved0=0x0, dwReserved1=0x0, cFileName="E_hSJDvcisFP.mp3", cAlternateFileName="E_HSJD~1.MP3")) returned 1 [0149.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8308830, ftCreationTime.dwHighDateTime=0x1d5e47c, ftLastAccessTime.dwLowDateTime=0xf2f00830, ftLastAccessTime.dwHighDateTime=0x1d5dcc6, ftLastWriteTime.dwLowDateTime=0xf2f00830, ftLastWriteTime.dwHighDateTime=0x1d5dcc6, nFileSizeHigh=0x0, nFileSizeLow=0x15b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="fUVobdXLFQcXGajtKuSb.pptx", cAlternateFileName="FUVOBD~1.PPT")) returned 1 [0149.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb3bcc40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3e2da0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hyBrDFjOidLuty.exe", cAlternateFileName="HYBRDF~1.EXE")) returned 1 [0149.615] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec97d0, ftCreationTime.dwHighDateTime=0x1d5e59a, ftLastAccessTime.dwLowDateTime=0x9c4f0aa0, ftLastAccessTime.dwHighDateTime=0x1d5e539, ftLastWriteTime.dwLowDateTime=0x9c4f0aa0, ftLastWriteTime.dwHighDateTime=0x1d5e539, nFileSizeHigh=0x0, nFileSizeLow=0x1070a, dwReserved0=0x0, dwReserved1=0x0, cFileName="In48QMtiqzJKxkMmi0_0.bmp", cAlternateFileName="IN48QM~1.BMP")) returned 1 [0149.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428cd190, ftCreationTime.dwHighDateTime=0x1d5e535, ftLastAccessTime.dwLowDateTime=0x15fa2170, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0x15fa2170, ftLastWriteTime.dwHighDateTime=0x1d5df66, nFileSizeHigh=0x0, nFileSizeLow=0x14e3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqRVKXHeLsTD3ACiwQ.xlsx", cAlternateFileName="JQRVKX~1.XLS")) returned 1 [0149.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d89110, ftCreationTime.dwHighDateTime=0x1d5df01, ftLastAccessTime.dwLowDateTime=0xbe4cba70, ftLastAccessTime.dwHighDateTime=0x1d5e6bb, ftLastWriteTime.dwLowDateTime=0xbe4cba70, ftLastWriteTime.dwHighDateTime=0x1d5e6bb, nFileSizeHigh=0x0, nFileSizeLow=0x3c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="keQ8zm0r3k8.m4a", cAlternateFileName="KEQ8ZM~1.M4A")) returned 1 [0149.616] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502ca170, ftCreationTime.dwHighDateTime=0x1d5e29e, ftLastAccessTime.dwLowDateTime=0xcc697c00, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0xcc697c00, ftLastWriteTime.dwHighDateTime=0x1d5de51, nFileSizeHigh=0x0, nFileSizeLow=0x14e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lS93GNjO1xhUD.csv", cAlternateFileName="LS93GN~1.CSV")) returned 1 [0149.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599685f0, ftCreationTime.dwHighDateTime=0x1d5da0b, ftLastAccessTime.dwLowDateTime=0xbfab2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0xbfab2ff0, ftLastWriteTime.dwHighDateTime=0x1d5e300, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5t_dUkYl.m4a", cAlternateFileName="O5T_DU~1.M4A")) returned 1 [0149.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9040b0, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0x4519320, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0x4519320, ftLastWriteTime.dwHighDateTime=0x1d5db71, nFileSizeHigh=0x0, nFileSizeLow=0x4a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oRiB96Q9shvBCOjF.avi", cAlternateFileName="ORIB96~1.AVI")) returned 1 [0149.617] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb370980, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb370980, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb396ae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x52c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PsExec.exe", cAlternateFileName="")) returned 1 [0149.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b287e0, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcb6dc130, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0xcb6dc130, ftLastWriteTime.dwHighDateTime=0x1d5e162, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="QAyhrze.pptx", cAlternateFileName="QAYHRZ~1.PPT")) returned 1 [0149.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba70c70, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0xb350aa90, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0xb350aa90, ftLastWriteTime.dwHighDateTime=0x1d5db81, nFileSizeHigh=0x0, nFileSizeLow=0xe602, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qloo57h4ZKuf1jhmtGy.png", cAlternateFileName="QLOO57~1.PNG")) returned 1 [0149.618] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80644780, ftCreationTime.dwHighDateTime=0x1d5e087, ftLastAccessTime.dwLowDateTime=0xf7bb01a0, ftLastAccessTime.dwHighDateTime=0x1d5e093, ftLastWriteTime.dwLowDateTime=0xf7bb01a0, ftLastWriteTime.dwHighDateTime=0x1d5e093, nFileSizeHigh=0x0, nFileSizeLow=0x13c2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="QoiJk.wav", cAlternateFileName="")) returned 1 [0149.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5e4c60, ftCreationTime.dwHighDateTime=0x1d5dbf2, ftLastAccessTime.dwLowDateTime=0x849104e0, ftLastAccessTime.dwHighDateTime=0x1d5e4f3, ftLastWriteTime.dwLowDateTime=0x849104e0, ftLastWriteTime.dwHighDateTime=0x1d5e4f3, nFileSizeHigh=0x0, nFileSizeLow=0xb1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="S0AtNwEYEOZZiI.mp4", cAlternateFileName="S0ATNW~1.MP4")) returned 1 [0149.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4dba040, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x4b1d580, ftLastAccessTime.dwHighDateTime=0x1d5e3ca, ftLastWriteTime.dwLowDateTime=0x4b1d580, ftLastWriteTime.dwHighDateTime=0x1d5e3ca, nFileSizeHigh=0x0, nFileSizeLow=0x68a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHo_eq8P8lTDYZ hjr.pptx", cAlternateFileName="SHO_EQ~1.PPT")) returned 1 [0149.619] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf863f570, ftCreationTime.dwHighDateTime=0x1d5e4bd, ftLastAccessTime.dwLowDateTime=0xbdc830a0, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0xbdc830a0, ftLastWriteTime.dwHighDateTime=0x1d5dff6, nFileSizeHigh=0x0, nFileSizeLow=0x18a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnBdN2.pptx", cAlternateFileName="TNBDN2~1.PPT")) returned 1 [0149.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66da28e0, ftCreationTime.dwHighDateTime=0x1d5e616, ftLastAccessTime.dwLowDateTime=0xf245f6f0, ftLastAccessTime.dwHighDateTime=0x1d5d920, ftLastWriteTime.dwLowDateTime=0xf245f6f0, ftLastWriteTime.dwHighDateTime=0x1d5d920, nFileSizeHigh=0x0, nFileSizeLow=0xfc1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="u8QEkqZ.xls", cAlternateFileName="")) returned 1 [0149.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55b704c0, ftCreationTime.dwHighDateTime=0x1d5d83d, ftLastAccessTime.dwLowDateTime=0x429c0d50, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0x429c0d50, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0x10089, dwReserved0=0x0, dwReserved1=0x0, cFileName="unVckZQ.wav", cAlternateFileName="")) returned 1 [0149.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923e6e0, ftCreationTime.dwHighDateTime=0x1d5df89, ftLastAccessTime.dwLowDateTime=0xe1be5e20, ftLastAccessTime.dwHighDateTime=0x1d5e2c2, ftLastWriteTime.dwLowDateTime=0xe1be5e20, ftLastWriteTime.dwHighDateTime=0x1d5e2c2, nFileSizeHigh=0x0, nFileSizeLow=0x54da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vs OqL88fs J.pptx", cAlternateFileName="VSOQL8~1.PPT")) returned 1 [0149.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838533e0, ftCreationTime.dwHighDateTime=0x1d5dcd4, ftLastAccessTime.dwLowDateTime=0x71882d30, ftLastAccessTime.dwHighDateTime=0x1d5dc72, ftLastWriteTime.dwLowDateTime=0x71882d30, ftLastWriteTime.dwHighDateTime=0x1d5dc72, nFileSizeHigh=0x0, nFileSizeLow=0xa064, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wzyx_q.ppt", cAlternateFileName="")) returned 1 [0149.620] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7afa00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xcd7afa00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xe67fad00, ftLastWriteTime.dwHighDateTime=0x1d6973b, nFileSizeHigh=0x0, nFileSizeLow=0x69640, dwReserved0=0x0, dwReserved1=0x0, cFileName="x22p4FOu0H3dU8Or.exe", cAlternateFileName="X22P4F~1.EXE")) returned 1 [0149.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bcb380, ftCreationTime.dwHighDateTime=0x1d5deba, ftLastAccessTime.dwLowDateTime=0x6e7d5d80, ftLastAccessTime.dwHighDateTime=0x1d5dd8b, ftLastWriteTime.dwLowDateTime=0x6e7d5d80, ftLastWriteTime.dwHighDateTime=0x1d5dd8b, nFileSizeHigh=0x0, nFileSizeLow=0x95a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="X6jjMGg6b2.ots", cAlternateFileName="X6JJMG~1.OTS")) returned 1 [0149.621] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cae3f0, ftCreationTime.dwHighDateTime=0x1d5dd02, ftLastAccessTime.dwLowDateTime=0x46733ab0, ftLastAccessTime.dwHighDateTime=0x1d5d8d8, ftLastWriteTime.dwLowDateTime=0x46733ab0, ftLastWriteTime.dwHighDateTime=0x1d5d8d8, nFileSizeHigh=0x0, nFileSizeLow=0x5d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xhi R8xI-CS6T-C04 o.wav", cAlternateFileName="XHIR8X~1.WAV")) returned 1 [0149.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ac87f20, ftCreationTime.dwHighDateTime=0x1d5e801, ftLastAccessTime.dwLowDateTime=0x97e95fd0, ftLastAccessTime.dwHighDateTime=0x1d5dd94, ftLastWriteTime.dwLowDateTime=0x97e95fd0, ftLastWriteTime.dwHighDateTime=0x1d5dd94, nFileSizeHigh=0x0, nFileSizeLow=0x8820, dwReserved0=0x0, dwReserved1=0x0, cFileName="yh6lbF sEgK4-KgFYpaH.pps", cAlternateFileName="YH6LBF~1.PPS")) returned 1 [0149.622] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1399b00, ftCreationTime.dwHighDateTime=0x1d5da55, ftLastAccessTime.dwLowDateTime=0x93efdd00, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x93efdd00, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x15ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ JUgTFvdw2L50UZoSQD.swf", cAlternateFileName="_JUGTF~1.SWF")) returned 1 [0149.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2f95a0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x445c2190, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x445c2190, ftLastWriteTime.dwHighDateTime=0x1d5e3fc, nFileSizeHigh=0x0, nFileSizeLow=0x10ecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_567I8.png", cAlternateFileName="")) returned 1 [0149.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a656b0, ftCreationTime.dwHighDateTime=0x1d5dd07, ftLastAccessTime.dwLowDateTime=0x8afdf5d0, ftLastAccessTime.dwHighDateTime=0x1d5dd4c, ftLastWriteTime.dwLowDateTime=0x8afdf5d0, ftLastWriteTime.dwHighDateTime=0x1d5dd4c, nFileSizeHigh=0x0, nFileSizeLow=0x4f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="_gKXHII6BC_F8dMlKrC.png", cAlternateFileName="_GKXHI~1.PNG")) returned 1 [0149.623] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1497ee0, ftCreationTime.dwHighDateTime=0x1d5dd9c, ftLastAccessTime.dwLowDateTime=0x35865f0, ftLastAccessTime.dwHighDateTime=0x1d5dcf9, ftLastWriteTime.dwLowDateTime=0x35865f0, ftLastWriteTime.dwHighDateTime=0x1d5dcf9, nFileSizeHigh=0x0, nFileSizeLow=0x1e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="_m_LxZ-lI5fbPZDE.bmp", cAlternateFileName="_M_LXZ~1.BMP")) returned 1 [0149.624] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1497ee0, ftCreationTime.dwHighDateTime=0x1d5dd9c, ftLastAccessTime.dwLowDateTime=0x35865f0, ftLastAccessTime.dwHighDateTime=0x1d5dcf9, ftLastWriteTime.dwLowDateTime=0x35865f0, ftLastWriteTime.dwHighDateTime=0x1d5dcf9, nFileSizeHigh=0x0, nFileSizeLow=0x1e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="_m_LxZ-lI5fbPZDE.bmp", cAlternateFileName="_M_LXZ~1.BMP")) returned 0 [0149.624] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0149.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0149.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0149.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", lpFilePart=0x0) returned 0x34 [0149.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.624] GetFileType (hFile=0x344) returned 0x1 [0149.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.624] GetFileType (hFile=0x344) returned 0x1 [0149.624] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1767e [0149.625] ReadFile (in: hFile=0x344, lpBuffer=0x12974f10, nNumberOfBytesToRead=0x1767e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12974f10*, lpNumberOfBytesRead=0x12dd38*=0x1767e, lpOverlapped=0x0) returned 1 [0149.627] CloseHandle (hObject=0x344) returned 1 [0149.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", lpFilePart=0x0) returned 0x34 [0149.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.737] GetFileType (hFile=0x344) returned 0x1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.737] GetFileType (hFile=0x344) returned 0x1 [0149.738] WriteFile (in: hFile=0x344, lpBuffer=0x26c6b08*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26c6b08*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.739] CloseHandle (hObject=0x344) returned 1 [0149.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", lpFilePart=0x0) returned 0x34 [0149.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.740] GetFileType (hFile=0x344) returned 0x1 [0149.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.740] GetFileType (hFile=0x344) returned 0x1 [0149.741] WriteFile (in: hFile=0x344, lpBuffer=0x129d2988*, nNumberOfBytesToWrite=0x17680, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x129d2988*, lpNumberOfBytesWritten=0x12dd98*=0x17680, lpOverlapped=0x0) returned 1 [0149.743] CloseHandle (hObject=0x344) returned 1 [0149.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx", lpFilePart=0x0) returned 0x34 [0149.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x3e [0149.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd93350, ftCreationTime.dwHighDateTime=0x1d5e150, ftLastAccessTime.dwLowDateTime=0xc6c38c60, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0x75343e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x17680)) returned 1 [0149.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.744] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTp5b89p9.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btp5b89p9.xlsx.symmyware")) returned 1 [0149.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", lpFilePart=0x0) returned 0x3a [0149.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.746] GetFileType (hFile=0x344) returned 0x1 [0149.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.746] GetFileType (hFile=0x344) returned 0x1 [0149.746] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x11edc [0149.746] ReadFile (in: hFile=0x344, lpBuffer=0x26c7fd0, nNumberOfBytesToRead=0x11edc, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26c7fd0*, lpNumberOfBytesRead=0x12dd38*=0x11edc, lpOverlapped=0x0) returned 1 [0149.748] CloseHandle (hObject=0x344) returned 1 [0149.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", lpFilePart=0x0) returned 0x3a [0149.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.833] GetFileType (hFile=0x344) returned 0x1 [0149.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.833] GetFileType (hFile=0x344) returned 0x1 [0149.833] WriteFile (in: hFile=0x344, lpBuffer=0x2760250*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2760250*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.835] CloseHandle (hObject=0x344) returned 1 [0149.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", lpFilePart=0x0) returned 0x3a [0149.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.837] GetFileType (hFile=0x344) returned 0x1 [0149.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.837] GetFileType (hFile=0x344) returned 0x1 [0149.837] WriteFile (in: hFile=0x344, lpBuffer=0x274ccf8*, nNumberOfBytesToWrite=0x11ee0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x274ccf8*, lpNumberOfBytesWritten=0x12dd98*=0x11ee0, lpOverlapped=0x0) returned 1 [0149.839] CloseHandle (hObject=0x344) returned 1 [0149.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a", lpFilePart=0x0) returned 0x3a [0149.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0149.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bbac50, ftCreationTime.dwHighDateTime=0x1d5dc75, ftLastAccessTime.dwLowDateTime=0xf0aed040, ftLastAccessTime.dwHighDateTime=0x1d5e515, ftLastWriteTime.dwLowDateTime=0x75fc700, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11ee0)) returned 1 [0149.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.840] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dBRzuL8XOgEfYA7s.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dbrzul8xogefya7s.m4a.symmyware")) returned 1 [0149.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", lpFilePart=0x0) returned 0x36 [0149.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.842] GetFileType (hFile=0x344) returned 0x1 [0149.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.842] GetFileType (hFile=0x344) returned 0x1 [0149.842] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x109aa [0149.843] ReadFile (in: hFile=0x344, lpBuffer=0x2761748, nNumberOfBytesToRead=0x109aa, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2761748*, lpNumberOfBytesRead=0x12dd38*=0x109aa, lpOverlapped=0x0) returned 1 [0149.844] CloseHandle (hObject=0x344) returned 1 [0149.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", lpFilePart=0x0) returned 0x36 [0149.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.854] GetFileType (hFile=0x344) returned 0x1 [0149.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.854] GetFileType (hFile=0x344) returned 0x1 [0149.854] WriteFile (in: hFile=0x344, lpBuffer=0x27f4310*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27f4310*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.855] CloseHandle (hObject=0x344) returned 1 [0149.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", lpFilePart=0x0) returned 0x36 [0149.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.858] GetFileType (hFile=0x344) returned 0x1 [0149.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.858] GetFileType (hFile=0x344) returned 0x1 [0149.858] WriteFile (in: hFile=0x344, lpBuffer=0x27e22f8*, nNumberOfBytesToWrite=0x109b0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27e22f8*, lpNumberOfBytesWritten=0x12dd98*=0x109b0, lpOverlapped=0x0) returned 1 [0149.860] CloseHandle (hObject=0x344) returned 1 [0149.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a", lpFilePart=0x0) returned 0x36 [0149.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0149.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2cf8820, ftCreationTime.dwHighDateTime=0x1d5e5c4, ftLastAccessTime.dwLowDateTime=0xaa1aa850, ftLastAccessTime.dwHighDateTime=0x1d5df27, ftLastWriteTime.dwLowDateTime=0x762ad30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x109b0)) returned 1 [0149.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\e6bFv 8H29i-.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\e6bfv 8h29i-.m4a.symmyware")) returned 1 [0149.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", lpFilePart=0x0) returned 0x31 [0149.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.865] GetFileType (hFile=0x344) returned 0x1 [0149.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.865] GetFileType (hFile=0x344) returned 0x1 [0149.865] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1c15 [0149.865] ReadFile (in: hFile=0x344, lpBuffer=0x27f57a0, nNumberOfBytesToRead=0x1c15, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27f57a0*, lpNumberOfBytesRead=0x12dd38*=0x1c15, lpOverlapped=0x0) returned 1 [0149.866] CloseHandle (hObject=0x344) returned 1 [0149.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", lpFilePart=0x0) returned 0x31 [0149.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.875] GetFileType (hFile=0x344) returned 0x1 [0149.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.875] GetFileType (hFile=0x344) returned 0x1 [0149.875] WriteFile (in: hFile=0x344, lpBuffer=0x2850548*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2850548*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.876] CloseHandle (hObject=0x344) returned 1 [0149.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", lpFilePart=0x0) returned 0x31 [0149.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.878] GetFileType (hFile=0x344) returned 0x1 [0149.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.878] GetFileType (hFile=0x344) returned 0x1 [0149.878] WriteFile (in: hFile=0x344, lpBuffer=0x284d2d8*, nNumberOfBytesToWrite=0x1c20, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x284d2d8*, lpNumberOfBytesWritten=0x12dd98*=0x1c20, lpOverlapped=0x0) returned 1 [0149.879] CloseHandle (hObject=0x344) returned 1 [0149.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a", lpFilePart=0x0) returned 0x31 [0149.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0149.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6e48c0, ftCreationTime.dwHighDateTime=0x1d5e04a, ftLastAccessTime.dwLowDateTime=0xe08cb1d0, ftLastAccessTime.dwHighDateTime=0x1d5e4b8, ftLastWriteTime.dwLowDateTime=0x7659360, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1c20)) returned 1 [0149.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.880] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\evRF86F.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\evrf86f.m4a.symmyware")) returned 1 [0149.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", lpFilePart=0x0) returned 0x3f [0149.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.883] GetFileType (hFile=0x344) returned 0x1 [0149.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.883] GetFileType (hFile=0x344) returned 0x1 [0149.883] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x15b51 [0149.883] ReadFile (in: hFile=0x344, lpBuffer=0x12a2f190, nNumberOfBytesToRead=0x15b51, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12a2f190*, lpNumberOfBytesRead=0x12dd38*=0x15b51, lpOverlapped=0x0) returned 1 [0149.884] CloseHandle (hObject=0x344) returned 1 [0149.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", lpFilePart=0x0) returned 0x3f [0149.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.901] GetFileType (hFile=0x344) returned 0x1 [0149.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.901] GetFileType (hFile=0x344) returned 0x1 [0149.901] WriteFile (in: hFile=0x344, lpBuffer=0x28a1ee8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28a1ee8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.902] CloseHandle (hObject=0x344) returned 1 [0149.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", lpFilePart=0x0) returned 0x3f [0149.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.904] GetFileType (hFile=0x344) returned 0x1 [0149.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.905] GetFileType (hFile=0x344) returned 0x1 [0149.905] WriteFile (in: hFile=0x344, lpBuffer=0x12713400*, nNumberOfBytesToWrite=0x15b60, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x12713400*, lpNumberOfBytesWritten=0x12dd98*=0x15b60, lpOverlapped=0x0) returned 1 [0149.908] CloseHandle (hObject=0x344) returned 1 [0149.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx", lpFilePart=0x0) returned 0x3f [0149.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x49 [0149.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8308830, ftCreationTime.dwHighDateTime=0x1d5e47c, ftLastAccessTime.dwLowDateTime=0xf2f00830, ftLastAccessTime.dwHighDateTime=0x1d5dcc6, ftLastWriteTime.dwLowDateTime=0x769d920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15b60)) returned 1 [0149.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.909] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fUVobdXLFQcXGajtKuSb.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuvobdxlfqcxgajtkusb.pptx.symmyware")) returned 1 [0149.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", lpFilePart=0x0) returned 0x3d [0149.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.911] GetFileType (hFile=0x344) returned 0x1 [0149.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.911] GetFileType (hFile=0x344) returned 0x1 [0149.911] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x14e3b [0149.911] ReadFile (in: hFile=0x344, lpBuffer=0x12728f98, nNumberOfBytesToRead=0x14e3b, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12728f98*, lpNumberOfBytesRead=0x12dd38*=0x14e3b, lpOverlapped=0x0) returned 1 [0149.912] CloseHandle (hObject=0x344) returned 1 [0149.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", lpFilePart=0x0) returned 0x3d [0149.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0149.982] GetFileType (hFile=0x344) returned 0x1 [0149.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0149.982] GetFileType (hFile=0x344) returned 0x1 [0149.982] WriteFile (in: hFile=0x344, lpBuffer=0x26f3f38*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26f3f38*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0149.983] CloseHandle (hObject=0x344) returned 1 [0149.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", lpFilePart=0x0) returned 0x3d [0149.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.985] GetFileType (hFile=0x344) returned 0x1 [0149.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.985] GetFileType (hFile=0x344) returned 0x1 [0149.985] WriteFile (in: hFile=0x344, lpBuffer=0x12791778*, nNumberOfBytesToWrite=0x14e40, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x12791778*, lpNumberOfBytesWritten=0x12dd98*=0x14e40, lpOverlapped=0x0) returned 1 [0149.987] CloseHandle (hObject=0x344) returned 1 [0149.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx", lpFilePart=0x0) returned 0x3d [0149.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0149.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0149.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428cd190, ftCreationTime.dwHighDateTime=0x1d5e535, ftLastAccessTime.dwLowDateTime=0x15fa2170, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0x77571e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14e40)) returned 1 [0149.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0149.988] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jqRVKXHeLsTD3ACiwQ.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jqrvkxhelstd3aciwq.xlsx.symmyware")) returned 1 [0149.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", lpFilePart=0x0) returned 0x35 [0149.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0149.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0149.990] GetFileType (hFile=0x344) returned 0x1 [0149.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0149.990] GetFileType (hFile=0x344) returned 0x1 [0149.990] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x3c54 [0149.990] ReadFile (in: hFile=0x344, lpBuffer=0x26f5410, nNumberOfBytesToRead=0x3c54, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26f5410*, lpNumberOfBytesRead=0x12dd38*=0x3c54, lpOverlapped=0x0) returned 1 [0149.992] CloseHandle (hObject=0x344) returned 1 [0149.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", lpFilePart=0x0) returned 0x35 [0149.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0149.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.002] GetFileType (hFile=0x344) returned 0x1 [0150.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.002] GetFileType (hFile=0x344) returned 0x1 [0150.002] WriteFile (in: hFile=0x344, lpBuffer=0x275c530*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x275c530*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.004] CloseHandle (hObject=0x344) returned 1 [0150.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", lpFilePart=0x0) returned 0x35 [0150.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.005] GetFileType (hFile=0x344) returned 0x1 [0150.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.006] GetFileType (hFile=0x344) returned 0x1 [0150.006] WriteFile (in: hFile=0x344, lpBuffer=0x2757270*, nNumberOfBytesToWrite=0x3c60, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2757270*, lpNumberOfBytesWritten=0x12dd98*=0x3c60, lpOverlapped=0x0) returned 1 [0150.007] CloseHandle (hObject=0x344) returned 1 [0150.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a", lpFilePart=0x0) returned 0x35 [0150.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x3f [0150.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d89110, ftCreationTime.dwHighDateTime=0x1d5df01, ftLastAccessTime.dwLowDateTime=0xbe4cba70, ftLastAccessTime.dwHighDateTime=0x1d5e6bb, ftLastWriteTime.dwLowDateTime=0x7785810, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3c60)) returned 1 [0150.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.008] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\keQ8zm0r3k8.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\keq8zm0r3k8.m4a.symmyware")) returned 1 [0150.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", lpFilePart=0x0) returned 0x37 [0150.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.010] GetFileType (hFile=0x344) returned 0x1 [0150.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.010] GetFileType (hFile=0x344) returned 0x1 [0150.010] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x14e6e [0150.010] ReadFile (in: hFile=0x344, lpBuffer=0x127a65f0, nNumberOfBytesToRead=0x14e6e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x127a65f0*, lpNumberOfBytesRead=0x12dd38*=0x14e6e, lpOverlapped=0x0) returned 1 [0150.011] CloseHandle (hObject=0x344) returned 1 [0150.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", lpFilePart=0x0) returned 0x37 [0150.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.022] GetFileType (hFile=0x344) returned 0x1 [0150.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.023] GetFileType (hFile=0x344) returned 0x1 [0150.023] WriteFile (in: hFile=0x344, lpBuffer=0x27ade88*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27ade88*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.024] CloseHandle (hObject=0x344) returned 1 [0150.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", lpFilePart=0x0) returned 0x37 [0150.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.026] GetFileType (hFile=0x344) returned 0x1 [0150.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.026] GetFileType (hFile=0x344) returned 0x1 [0150.026] WriteFile (in: hFile=0x344, lpBuffer=0x1280eec0*, nNumberOfBytesToWrite=0x14e70, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x1280eec0*, lpNumberOfBytesWritten=0x12dd98*=0x14e70, lpOverlapped=0x0) returned 1 [0150.028] CloseHandle (hObject=0x344) returned 1 [0150.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv", lpFilePart=0x0) returned 0x37 [0150.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0150.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502ca170, ftCreationTime.dwHighDateTime=0x1d5e29e, ftLastAccessTime.dwLowDateTime=0xcc697c00, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0x77bb370, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14e70)) returned 1 [0150.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lS93GNjO1xhUD.csv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ls93gnjo1xhud.csv.symmyware")) returned 1 [0150.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", lpFilePart=0x0) returned 0x33 [0150.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.031] GetFileType (hFile=0x344) returned 0x1 [0150.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.031] GetFileType (hFile=0x344) returned 0x1 [0150.031] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x6bfa [0150.031] ReadFile (in: hFile=0x344, lpBuffer=0x27af320, nNumberOfBytesToRead=0x6bfa, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27af320*, lpNumberOfBytesRead=0x12dd38*=0x6bfa, lpOverlapped=0x0) returned 1 [0150.032] CloseHandle (hObject=0x344) returned 1 [0150.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", lpFilePart=0x0) returned 0x33 [0150.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.042] GetFileType (hFile=0x344) returned 0x1 [0150.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.042] GetFileType (hFile=0x344) returned 0x1 [0150.042] WriteFile (in: hFile=0x344, lpBuffer=0x2828010*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2828010*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.043] CloseHandle (hObject=0x344) returned 1 [0150.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", lpFilePart=0x0) returned 0x33 [0150.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.045] GetFileType (hFile=0x344) returned 0x1 [0150.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.045] GetFileType (hFile=0x344) returned 0x1 [0150.045] WriteFile (in: hFile=0x344, lpBuffer=0x281fdb8*, nNumberOfBytesToWrite=0x6c00, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x281fdb8*, lpNumberOfBytesWritten=0x12dd98*=0x6c00, lpOverlapped=0x0) returned 1 [0150.047] CloseHandle (hObject=0x344) returned 1 [0150.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a", lpFilePart=0x0) returned 0x33 [0150.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x3d [0150.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x599685f0, ftCreationTime.dwHighDateTime=0x1d5da0b, ftLastAccessTime.dwLowDateTime=0xbfab2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0x77e7290, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6c00)) returned 1 [0150.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.048] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\o5t_dUkYl.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5t_dukyl.m4a.symmyware")) returned 1 [0150.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", lpFilePart=0x0) returned 0x3a [0150.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.051] GetFileType (hFile=0x344) returned 0x1 [0150.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.051] GetFileType (hFile=0x344) returned 0x1 [0150.051] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x4a2c [0150.051] ReadFile (in: hFile=0x344, lpBuffer=0x28294a0, nNumberOfBytesToRead=0x4a2c, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28294a0*, lpNumberOfBytesRead=0x12dd38*=0x4a2c, lpOverlapped=0x0) returned 1 [0150.052] CloseHandle (hObject=0x344) returned 1 [0150.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", lpFilePart=0x0) returned 0x3a [0150.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.061] GetFileType (hFile=0x344) returned 0x1 [0150.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.062] GetFileType (hFile=0x344) returned 0x1 [0150.062] WriteFile (in: hFile=0x344, lpBuffer=0x28956d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28956d0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.063] CloseHandle (hObject=0x344) returned 1 [0150.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", lpFilePart=0x0) returned 0x3a [0150.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.065] GetFileType (hFile=0x344) returned 0x1 [0150.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.065] GetFileType (hFile=0x344) returned 0x1 [0150.065] WriteFile (in: hFile=0x344, lpBuffer=0x288f628*, nNumberOfBytesToWrite=0x4a30, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x288f628*, lpNumberOfBytesWritten=0x12dd98*=0x4a30, lpOverlapped=0x0) returned 1 [0150.066] CloseHandle (hObject=0x344) returned 1 [0150.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi", lpFilePart=0x0) returned 0x3a [0150.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0150.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9040b0, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0x4519320, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0x78131b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4a30)) returned 1 [0150.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.067] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oRiB96Q9shvBCOjF.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\orib96q9shvbcojf.avi.symmyware")) returned 1 [0150.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", lpFilePart=0x0) returned 0x32 [0150.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.069] GetFileType (hFile=0x344) returned 0x1 [0150.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.069] GetFileType (hFile=0x344) returned 0x1 [0150.069] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xf94 [0150.069] ReadFile (in: hFile=0x344, lpBuffer=0x2897b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2897b68*, lpNumberOfBytesRead=0x12dd38*=0xf94, lpOverlapped=0x0) returned 1 [0150.070] CloseHandle (hObject=0x344) returned 1 [0150.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", lpFilePart=0x0) returned 0x32 [0150.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.117] GetFileType (hFile=0x344) returned 0x1 [0150.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.117] GetFileType (hFile=0x344) returned 0x1 [0150.118] WriteFile (in: hFile=0x344, lpBuffer=0x26ef528*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26ef528*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.119] CloseHandle (hObject=0x344) returned 1 [0150.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", lpFilePart=0x0) returned 0x32 [0150.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.121] GetFileType (hFile=0x344) returned 0x1 [0150.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.121] GetFileType (hFile=0x344) returned 0x1 [0150.121] WriteFile (in: hFile=0x344, lpBuffer=0x26f0680*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x26f0680*, lpNumberOfBytesWritten=0x12dc48*=0xfa0, lpOverlapped=0x0) returned 1 [0150.122] CloseHandle (hObject=0x344) returned 1 [0150.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx", lpFilePart=0x0) returned 0x32 [0150.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x3c [0150.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b287e0, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcb6dc130, ftLastAccessTime.dwHighDateTime=0x1d5e162, ftLastWriteTime.dwLowDateTime=0x7894800, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0150.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.123] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\QAyhrze.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qayhrze.pptx.symmyware")) returned 1 [0150.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", lpFilePart=0x0) returned 0x3d [0150.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.125] GetFileType (hFile=0x344) returned 0x1 [0150.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.125] GetFileType (hFile=0x344) returned 0x1 [0150.125] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xe602 [0150.125] ReadFile (in: hFile=0x344, lpBuffer=0x26f19d8, nNumberOfBytesToRead=0xe602, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26f19d8*, lpNumberOfBytesRead=0x12dd38*=0xe602, lpOverlapped=0x0) returned 1 [0150.126] CloseHandle (hObject=0x344) returned 1 [0150.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", lpFilePart=0x0) returned 0x3d [0150.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.136] GetFileType (hFile=0x344) returned 0x1 [0150.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.136] GetFileType (hFile=0x344) returned 0x1 [0150.136] WriteFile (in: hFile=0x344, lpBuffer=0x277b920*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x277b920*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.137] CloseHandle (hObject=0x344) returned 1 [0150.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", lpFilePart=0x0) returned 0x3d [0150.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.139] GetFileType (hFile=0x344) returned 0x1 [0150.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.139] GetFileType (hFile=0x344) returned 0x1 [0150.139] WriteFile (in: hFile=0x344, lpBuffer=0x276bc90*, nNumberOfBytesToWrite=0xe610, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x276bc90*, lpNumberOfBytesWritten=0x12dd98*=0xe610, lpOverlapped=0x0) returned 1 [0150.142] CloseHandle (hObject=0x344) returned 1 [0150.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png", lpFilePart=0x0) returned 0x3d [0150.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0150.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba70c70, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0xb350aa90, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0x78c5540, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe610)) returned 1 [0150.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.143] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qloo57h4ZKuf1jhmtGy.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qloo57h4zkuf1jhmtgy.png.symmyware")) returned 1 [0150.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", lpFilePart=0x0) returned 0x38 [0150.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.145] GetFileType (hFile=0x344) returned 0x1 [0150.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.145] GetFileType (hFile=0x344) returned 0x1 [0150.145] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xb1d3 [0150.145] ReadFile (in: hFile=0x344, lpBuffer=0x277ce30, nNumberOfBytesToRead=0xb1d3, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x277ce30*, lpNumberOfBytesRead=0x12dd38*=0xb1d3, lpOverlapped=0x0) returned 1 [0150.146] CloseHandle (hObject=0x344) returned 1 [0150.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", lpFilePart=0x0) returned 0x38 [0150.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.156] GetFileType (hFile=0x344) returned 0x1 [0150.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.156] GetFileType (hFile=0x344) returned 0x1 [0150.156] WriteFile (in: hFile=0x344, lpBuffer=0x27f9ac0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27f9ac0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.157] CloseHandle (hObject=0x344) returned 1 [0150.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", lpFilePart=0x0) returned 0x38 [0150.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.159] GetFileType (hFile=0x344) returned 0x1 [0150.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.159] GetFileType (hFile=0x344) returned 0x1 [0150.159] WriteFile (in: hFile=0x344, lpBuffer=0x27ed270*, nNumberOfBytesToWrite=0xb1e0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27ed270*, lpNumberOfBytesWritten=0x12dd98*=0xb1e0, lpOverlapped=0x0) returned 1 [0150.160] CloseHandle (hObject=0x344) returned 1 [0150.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4", lpFilePart=0x0) returned 0x38 [0150.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x42 [0150.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5e4c60, ftCreationTime.dwHighDateTime=0x1d5dbf2, ftLastAccessTime.dwLowDateTime=0x849104e0, ftLastAccessTime.dwHighDateTime=0x1d5e4f3, ftLastWriteTime.dwLowDateTime=0x78f3b70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb1e0)) returned 1 [0150.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.161] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S0AtNwEYEOZZiI.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s0atnweyeozzii.mp4.symmyware")) returned 1 [0150.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", lpFilePart=0x0) returned 0x3d [0150.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.163] GetFileType (hFile=0x344) returned 0x1 [0150.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.163] GetFileType (hFile=0x344) returned 0x1 [0150.163] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x68a9 [0150.163] ReadFile (in: hFile=0x344, lpBuffer=0x27faf90, nNumberOfBytesToRead=0x68a9, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27faf90*, lpNumberOfBytesRead=0x12dd38*=0x68a9, lpOverlapped=0x0) returned 1 [0150.164] CloseHandle (hObject=0x344) returned 1 [0150.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", lpFilePart=0x0) returned 0x3d [0150.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.173] GetFileType (hFile=0x344) returned 0x1 [0150.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.173] GetFileType (hFile=0x344) returned 0x1 [0150.173] WriteFile (in: hFile=0x344, lpBuffer=0x28728c8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28728c8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.174] CloseHandle (hObject=0x344) returned 1 [0150.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", lpFilePart=0x0) returned 0x3d [0150.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.176] GetFileType (hFile=0x344) returned 0x1 [0150.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.176] GetFileType (hFile=0x344) returned 0x1 [0150.176] WriteFile (in: hFile=0x344, lpBuffer=0x286a998*, nNumberOfBytesToWrite=0x68b0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x286a998*, lpNumberOfBytesWritten=0x12dd98*=0x68b0, lpOverlapped=0x0) returned 1 [0150.178] CloseHandle (hObject=0x344) returned 1 [0150.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx", lpFilePart=0x0) returned 0x3d [0150.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0150.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4dba040, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x4b1d580, ftLastAccessTime.dwHighDateTime=0x1d5e3ca, ftLastWriteTime.dwLowDateTime=0x791d380, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x68b0)) returned 1 [0150.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SHo_eq8P8lTDYZ hjr.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sho_eq8p8ltdyz hjr.pptx.symmyware")) returned 1 [0150.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", lpFilePart=0x0) returned 0x31 [0150.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.181] GetFileType (hFile=0x344) returned 0x1 [0150.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.181] GetFileType (hFile=0x344) returned 0x1 [0150.181] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x18a9d [0150.181] ReadFile (in: hFile=0x344, lpBuffer=0x12856d78, nNumberOfBytesToRead=0x18a9d, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12856d78*, lpNumberOfBytesRead=0x12dd38*=0x18a9d, lpOverlapped=0x0) returned 1 [0150.183] CloseHandle (hObject=0x344) returned 1 [0150.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", lpFilePart=0x0) returned 0x31 [0150.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.194] GetFileType (hFile=0x344) returned 0x1 [0150.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.194] GetFileType (hFile=0x344) returned 0x1 [0150.194] WriteFile (in: hFile=0x344, lpBuffer=0x28c4240*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28c4240*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.195] CloseHandle (hObject=0x344) returned 1 [0150.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", lpFilePart=0x0) returned 0x31 [0150.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.197] GetFileType (hFile=0x344) returned 0x1 [0150.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.197] GetFileType (hFile=0x344) returned 0x1 [0150.197] WriteFile (in: hFile=0x344, lpBuffer=0x128d2338*, nNumberOfBytesToWrite=0x18aa0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x128d2338*, lpNumberOfBytesWritten=0x12dd98*=0x18aa0, lpOverlapped=0x0) returned 1 [0150.200] CloseHandle (hObject=0x344) returned 1 [0150.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx", lpFilePart=0x0) returned 0x31 [0150.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0150.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf863f570, ftCreationTime.dwHighDateTime=0x1d5e4bd, ftLastAccessTime.dwLowDateTime=0xbdc830a0, ftLastAccessTime.dwHighDateTime=0x1d5dff6, ftLastWriteTime.dwLowDateTime=0x794e0c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x18aa0)) returned 1 [0150.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.201] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tnBdN2.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tnbdn2.pptx.symmyware")) returned 1 [0150.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", lpFilePart=0x0) returned 0x31 [0150.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.203] GetFileType (hFile=0x344) returned 0x1 [0150.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.203] GetFileType (hFile=0x344) returned 0x1 [0150.203] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xfc1e [0150.204] ReadFile (in: hFile=0x344, lpBuffer=0x28c5690, nNumberOfBytesToRead=0xfc1e, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28c5690*, lpNumberOfBytesRead=0x12dd38*=0xfc1e, lpOverlapped=0x0) returned 1 [0150.205] CloseHandle (hObject=0x344) returned 1 [0150.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", lpFilePart=0x0) returned 0x31 [0150.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.244] GetFileType (hFile=0x344) returned 0x1 [0150.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.244] GetFileType (hFile=0x344) returned 0x1 [0150.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", lpFilePart=0x0) returned 0x31 [0150.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.247] GetFileType (hFile=0x344) returned 0x1 [0150.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.247] GetFileType (hFile=0x344) returned 0x1 [0150.247] WriteFile (in: hFile=0x344, lpBuffer=0x2747150*, nNumberOfBytesToWrite=0xfc20, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2747150*, lpNumberOfBytesWritten=0x12dd98*=0xfc20, lpOverlapped=0x0) returned 1 [0150.249] CloseHandle (hObject=0x344) returned 1 [0150.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls", lpFilePart=0x0) returned 0x31 [0150.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0150.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66da28e0, ftCreationTime.dwHighDateTime=0x1d5e616, ftLastAccessTime.dwLowDateTime=0xf245f6f0, ftLastAccessTime.dwHighDateTime=0x1d5d920, ftLastWriteTime.dwLowDateTime=0x79c0cb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xfc20)) returned 1 [0150.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.250] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\u8QEkqZ.xls.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\u8qekqz.xls.symmyware")) returned 1 [0150.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", lpFilePart=0x0) returned 0x37 [0150.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.252] GetFileType (hFile=0x344) returned 0x1 [0150.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.252] GetFileType (hFile=0x344) returned 0x1 [0150.252] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x54da [0150.253] ReadFile (in: hFile=0x344, lpBuffer=0x2759850, nNumberOfBytesToRead=0x54da, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2759850*, lpNumberOfBytesRead=0x12dd38*=0x54da, lpOverlapped=0x0) returned 1 [0150.254] CloseHandle (hObject=0x344) returned 1 [0150.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", lpFilePart=0x0) returned 0x37 [0150.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.280] GetFileType (hFile=0x344) returned 0x1 [0150.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.280] GetFileType (hFile=0x344) returned 0x1 [0150.280] WriteFile (in: hFile=0x344, lpBuffer=0x27c9c78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27c9c78*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.281] CloseHandle (hObject=0x344) returned 1 [0150.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", lpFilePart=0x0) returned 0x37 [0150.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.283] GetFileType (hFile=0x344) returned 0x1 [0150.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.283] GetFileType (hFile=0x344) returned 0x1 [0150.283] WriteFile (in: hFile=0x344, lpBuffer=0x27c3130*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27c3130*, lpNumberOfBytesWritten=0x12dd98*=0x54e0, lpOverlapped=0x0) returned 1 [0150.284] CloseHandle (hObject=0x344) returned 1 [0150.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx", lpFilePart=0x0) returned 0x37 [0150.285] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0150.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd923e6e0, ftCreationTime.dwHighDateTime=0x1d5df89, ftLastAccessTime.dwLowDateTime=0xe1be5e20, ftLastAccessTime.dwHighDateTime=0x1d5e2c2, ftLastWriteTime.dwLowDateTime=0x7a163e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x54e0)) returned 1 [0150.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.285] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Vs OqL88fs J.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vs oql88fs j.pptx.symmyware")) returned 1 [0150.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", lpFilePart=0x0) returned 0x30 [0150.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.287] GetFileType (hFile=0x344) returned 0x1 [0150.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.287] GetFileType (hFile=0x344) returned 0x1 [0150.287] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xa064 [0150.287] ReadFile (in: hFile=0x344, lpBuffer=0x27cb108, nNumberOfBytesToRead=0xa064, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27cb108*, lpNumberOfBytesRead=0x12dd38*=0xa064, lpOverlapped=0x0) returned 1 [0150.288] CloseHandle (hObject=0x344) returned 1 [0150.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", lpFilePart=0x0) returned 0x30 [0150.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.297] GetFileType (hFile=0x344) returned 0x1 [0150.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.297] GetFileType (hFile=0x344) returned 0x1 [0150.297] WriteFile (in: hFile=0x344, lpBuffer=0x2857890*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2857890*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.298] CloseHandle (hObject=0x344) returned 1 [0150.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", lpFilePart=0x0) returned 0x30 [0150.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.300] GetFileType (hFile=0x344) returned 0x1 [0150.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.300] GetFileType (hFile=0x344) returned 0x1 [0150.300] WriteFile (in: hFile=0x344, lpBuffer=0x284c1d0*, nNumberOfBytesToWrite=0xa070, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x284c1d0*, lpNumberOfBytesWritten=0x12dd98*=0xa070, lpOverlapped=0x0) returned 1 [0150.302] CloseHandle (hObject=0x344) returned 1 [0150.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt", lpFilePart=0x0) returned 0x30 [0150.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt.SYMMYWARE", lpFilePart=0x0) returned 0x3a [0150.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838533e0, ftCreationTime.dwHighDateTime=0x1d5dcd4, ftLastAccessTime.dwLowDateTime=0x71882d30, ftLastAccessTime.dwHighDateTime=0x1d5dc72, ftLastWriteTime.dwLowDateTime=0x7a3fbf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa070)) returned 1 [0150.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.303] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Wzyx_q.ppt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzyx_q.ppt.symmyware")) returned 1 [0150.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", lpFilePart=0x0) returned 0x30 [0150.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.305] GetFileType (hFile=0x344) returned 0x1 [0150.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.305] GetFileType (hFile=0x344) returned 0x1 [0150.305] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x10ecd [0150.305] ReadFile (in: hFile=0x344, lpBuffer=0x2858da8, nNumberOfBytesToRead=0x10ecd, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2858da8*, lpNumberOfBytesRead=0x12dd38*=0x10ecd, lpOverlapped=0x0) returned 1 [0150.306] CloseHandle (hObject=0x344) returned 1 [0150.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", lpFilePart=0x0) returned 0x30 [0150.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.335] GetFileType (hFile=0x344) returned 0x1 [0150.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.335] GetFileType (hFile=0x344) returned 0x1 [0150.335] WriteFile (in: hFile=0x344, lpBuffer=0x26f9810*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26f9810*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.337] CloseHandle (hObject=0x344) returned 1 [0150.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", lpFilePart=0x0) returned 0x30 [0150.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.338] GetFileType (hFile=0x344) returned 0x1 [0150.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.339] GetFileType (hFile=0x344) returned 0x1 [0150.339] WriteFile (in: hFile=0x344, lpBuffer=0x26e72f0*, nNumberOfBytesToWrite=0x10ed0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26e72f0*, lpNumberOfBytesWritten=0x12dd98*=0x10ed0, lpOverlapped=0x0) returned 1 [0150.341] CloseHandle (hObject=0x344) returned 1 [0150.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png", lpFilePart=0x0) returned 0x30 [0150.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png.SYMMYWARE", lpFilePart=0x0) returned 0x3a [0150.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2f95a0, ftCreationTime.dwHighDateTime=0x1d5df5d, ftLastAccessTime.dwLowDateTime=0x445c2190, ftLastAccessTime.dwHighDateTime=0x1d5e3fc, ftLastWriteTime.dwLowDateTime=0x7a9a140, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10ed0)) returned 1 [0150.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_567I8.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_567i8.png.symmyware")) returned 1 [0150.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", lpFilePart=0x0) returned 0x3d [0150.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.345] GetFileType (hFile=0x344) returned 0x1 [0150.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.345] GetFileType (hFile=0x344) returned 0x1 [0150.346] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x4f24 [0150.346] ReadFile (in: hFile=0x344, lpBuffer=0x26fac90, nNumberOfBytesToRead=0x4f24, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26fac90*, lpNumberOfBytesRead=0x12dd38*=0x4f24, lpOverlapped=0x0) returned 1 [0150.347] CloseHandle (hObject=0x344) returned 1 [0150.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", lpFilePart=0x0) returned 0x3d [0150.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.389] GetFileType (hFile=0x344) returned 0x1 [0150.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.389] GetFileType (hFile=0x344) returned 0x1 [0150.389] WriteFile (in: hFile=0x344, lpBuffer=0x2768eb0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2768eb0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.390] CloseHandle (hObject=0x344) returned 1 [0150.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", lpFilePart=0x0) returned 0x3d [0150.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.392] GetFileType (hFile=0x344) returned 0x1 [0150.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.392] GetFileType (hFile=0x344) returned 0x1 [0150.392] WriteFile (in: hFile=0x344, lpBuffer=0x2762900*, nNumberOfBytesToWrite=0x4f30, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2762900*, lpNumberOfBytesWritten=0x12dd98*=0x4f30, lpOverlapped=0x0) returned 1 [0150.394] CloseHandle (hObject=0x344) returned 1 [0150.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png", lpFilePart=0x0) returned 0x3d [0150.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0150.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64a656b0, ftCreationTime.dwHighDateTime=0x1d5dd07, ftLastAccessTime.dwLowDateTime=0x8afdf5d0, ftLastAccessTime.dwHighDateTime=0x1d5dd4c, ftLastWriteTime.dwLowDateTime=0x7b16970, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4f30)) returned 1 [0150.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_gKXHII6BC_F8dMlKrC.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_gkxhii6bc_f8dmlkrc.png.symmyware")) returned 1 [0150.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n", lpFilePart=0x0) returned 0x2e [0150.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\", lpFilePart=0x0) returned 0x2f [0150.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfcceb0, ftCreationTime.dwHighDateTime=0x1d5dfed, ftLastAccessTime.dwLowDateTime=0xbf1044a0, ftLastAccessTime.dwHighDateTime=0x1d5df80, ftLastWriteTime.dwLowDateTime=0xbf1044a0, ftLastWriteTime.dwHighDateTime=0x1d5df80, nFileSizeHigh=0x0, nFileSizeLow=0x57e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-kBOjh.pdf", cAlternateFileName="")) returned 1 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bec320, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xdb68a50, ftLastAccessTime.dwHighDateTime=0x1d5e5d1, ftLastWriteTime.dwLowDateTime=0xdb68a50, ftLastWriteTime.dwHighDateTime=0x1d5e5d1, nFileSizeHigh=0x0, nFileSizeLow=0xe95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="21iT2O.mp3", cAlternateFileName="")) returned 1 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ed5b70, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x8e8f7ba0, ftLastAccessTime.dwHighDateTime=0x1d5dac8, ftLastWriteTime.dwLowDateTime=0x8e8f7ba0, ftLastWriteTime.dwHighDateTime=0x1d5dac8, nFileSizeHigh=0x0, nFileSizeLow=0x17d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="2awrm7S4uQmdTOi.mkv", cAlternateFileName="2AWRM7~1.MKV")) returned 1 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2645d7b0, ftCreationTime.dwHighDateTime=0x1d5e5f4, ftLastAccessTime.dwLowDateTime=0xc0045bd0, ftLastAccessTime.dwHighDateTime=0x1d5e2a5, ftLastWriteTime.dwLowDateTime=0xc0045bd0, ftLastWriteTime.dwHighDateTime=0x1d5e2a5, nFileSizeHigh=0x0, nFileSizeLow=0x1824a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmULw-MsTuz5fPudYWY.mp3", cAlternateFileName="EMULW-~1.MP3")) returned 1 [0150.397] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bad6350, ftCreationTime.dwHighDateTime=0x1d5ddad, ftLastAccessTime.dwLowDateTime=0x5b77d40, ftLastAccessTime.dwHighDateTime=0x1d5e49c, ftLastWriteTime.dwLowDateTime=0x5b77d40, ftLastWriteTime.dwHighDateTime=0x1d5e49c, nFileSizeHigh=0x0, nFileSizeLow=0x13c61, dwReserved0=0x0, dwReserved1=0x0, cFileName="fowexWX0hF.wav", cAlternateFileName="FOWEXW~1.WAV")) returned 1 [0150.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f26f2c0, ftCreationTime.dwHighDateTime=0x1d5dee4, ftLastAccessTime.dwLowDateTime=0x98e4f830, ftLastAccessTime.dwHighDateTime=0x1d5dc73, ftLastWriteTime.dwLowDateTime=0x98e4f830, ftLastWriteTime.dwHighDateTime=0x1d5dc73, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOy4.gif", cAlternateFileName="")) returned 1 [0150.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.398] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n", lpFilePart=0x0) returned 0x2e [0150.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\", lpFilePart=0x0) returned 0x2f [0150.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.398] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b077df0, ftCreationTime.dwHighDateTime=0x1d5d88c, ftLastAccessTime.dwLowDateTime=0x5b540490, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x5b540490, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfcceb0, ftCreationTime.dwHighDateTime=0x1d5dfed, ftLastAccessTime.dwLowDateTime=0xbf1044a0, ftLastAccessTime.dwHighDateTime=0x1d5df80, ftLastWriteTime.dwLowDateTime=0xbf1044a0, ftLastWriteTime.dwHighDateTime=0x1d5df80, nFileSizeHigh=0x0, nFileSizeLow=0x57e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="-kBOjh.pdf", cAlternateFileName="")) returned 1 [0150.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bec320, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xdb68a50, ftLastAccessTime.dwHighDateTime=0x1d5e5d1, ftLastWriteTime.dwLowDateTime=0xdb68a50, ftLastWriteTime.dwHighDateTime=0x1d5e5d1, nFileSizeHigh=0x0, nFileSizeLow=0xe95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="21iT2O.mp3", cAlternateFileName="")) returned 1 [0150.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ed5b70, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x8e8f7ba0, ftLastAccessTime.dwHighDateTime=0x1d5dac8, ftLastWriteTime.dwLowDateTime=0x8e8f7ba0, ftLastWriteTime.dwHighDateTime=0x1d5dac8, nFileSizeHigh=0x0, nFileSizeLow=0x17d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="2awrm7S4uQmdTOi.mkv", cAlternateFileName="2AWRM7~1.MKV")) returned 1 [0150.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2645d7b0, ftCreationTime.dwHighDateTime=0x1d5e5f4, ftLastAccessTime.dwLowDateTime=0xc0045bd0, ftLastAccessTime.dwHighDateTime=0x1d5e2a5, ftLastWriteTime.dwLowDateTime=0xc0045bd0, ftLastWriteTime.dwHighDateTime=0x1d5e2a5, nFileSizeHigh=0x0, nFileSizeLow=0x1824a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmULw-MsTuz5fPudYWY.mp3", cAlternateFileName="EMULW-~1.MP3")) returned 1 [0150.399] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bad6350, ftCreationTime.dwHighDateTime=0x1d5ddad, ftLastAccessTime.dwLowDateTime=0x5b77d40, ftLastAccessTime.dwHighDateTime=0x1d5e49c, ftLastWriteTime.dwLowDateTime=0x5b77d40, ftLastWriteTime.dwHighDateTime=0x1d5e49c, nFileSizeHigh=0x0, nFileSizeLow=0x13c61, dwReserved0=0x0, dwReserved1=0x0, cFileName="fowexWX0hF.wav", cAlternateFileName="FOWEXW~1.WAV")) returned 1 [0150.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f26f2c0, ftCreationTime.dwHighDateTime=0x1d5dee4, ftLastAccessTime.dwLowDateTime=0x98e4f830, ftLastAccessTime.dwHighDateTime=0x1d5dc73, ftLastWriteTime.dwLowDateTime=0x98e4f830, ftLastWriteTime.dwHighDateTime=0x1d5dc73, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOy4.gif", cAlternateFileName="")) returned 1 [0150.400] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f26f2c0, ftCreationTime.dwHighDateTime=0x1d5dee4, ftLastAccessTime.dwLowDateTime=0x98e4f830, ftLastAccessTime.dwHighDateTime=0x1d5dc73, ftLastWriteTime.dwLowDateTime=0x98e4f830, ftLastWriteTime.dwHighDateTime=0x1d5dc73, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOy4.gif", cAlternateFileName="")) returned 0 [0150.400] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", lpFilePart=0x0) returned 0x39 [0150.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.401] GetFileType (hFile=0x344) returned 0x1 [0150.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.401] GetFileType (hFile=0x344) returned 0x1 [0150.401] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x57e7 [0150.401] ReadFile (in: hFile=0x344, lpBuffer=0x276d690, nNumberOfBytesToRead=0x57e7, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x276d690*, lpNumberOfBytesRead=0x12dcb8*=0x57e7, lpOverlapped=0x0) returned 1 [0150.402] CloseHandle (hObject=0x344) returned 1 [0150.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", lpFilePart=0x0) returned 0x39 [0150.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.411] GetFileType (hFile=0x344) returned 0x1 [0150.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.411] GetFileType (hFile=0x344) returned 0x1 [0150.412] WriteFile (in: hFile=0x344, lpBuffer=0x27deb28*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27deb28*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.413] CloseHandle (hObject=0x344) returned 1 [0150.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", lpFilePart=0x0) returned 0x39 [0150.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.414] GetFileType (hFile=0x344) returned 0x1 [0150.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.414] GetFileType (hFile=0x344) returned 0x1 [0150.414] WriteFile (in: hFile=0x344, lpBuffer=0x27d7cd8*, nNumberOfBytesToWrite=0x57f0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27d7cd8*, lpNumberOfBytesWritten=0x12dd18*=0x57f0, lpOverlapped=0x0) returned 1 [0150.416] CloseHandle (hObject=0x344) returned 1 [0150.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf", lpFilePart=0x0) returned 0x39 [0150.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf.SYMMYWARE", lpFilePart=0x0) returned 0x43 [0150.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfcceb0, ftCreationTime.dwHighDateTime=0x1d5dfed, ftLastAccessTime.dwLowDateTime=0xbf1044a0, ftLastAccessTime.dwHighDateTime=0x1d5df80, ftLastWriteTime.dwLowDateTime=0x7b4c4d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x57f0)) returned 1 [0150.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\-kBOjh.pdf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\-kbojh.pdf.symmyware")) returned 1 [0150.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0150.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0150.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\29yJ2f0n\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\29yj2f0n\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.420] GetFileType (hFile=0x344) returned 0x1 [0150.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0150.420] GetFileType (hFile=0x344) returned 0x1 [0150.421] WriteFile (in: hFile=0x344, lpBuffer=0x27e2158*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27e2158*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0150.422] CloseHandle (hObject=0x344) returned 1 [0150.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_", lpFilePart=0x0) returned 0x3a [0150.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\", lpFilePart=0x0) returned 0x3b [0150.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb42f10, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0xf3d22b60, ftLastAccessTime.dwHighDateTime=0x1d5e6f9, ftLastWriteTime.dwLowDateTime=0xf3d22b60, ftLastWriteTime.dwHighDateTime=0x1d5e6f9, nFileSizeHigh=0x0, nFileSizeLow=0x269a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0yJ4QBY.mp4", cAlternateFileName="")) returned 1 [0150.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a54ed0, ftCreationTime.dwHighDateTime=0x1d5ddb4, ftLastAccessTime.dwLowDateTime=0x88976300, ftLastAccessTime.dwHighDateTime=0x1d5e745, ftLastWriteTime.dwLowDateTime=0x88976300, ftLastWriteTime.dwHighDateTime=0x1d5e745, nFileSizeHigh=0x0, nFileSizeLow=0xbd85, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKFVNq5 CkL63JM.flv", cAlternateFileName="FKFVNQ~1.FLV")) returned 1 [0150.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a9dcea0, ftCreationTime.dwHighDateTime=0x1d5d835, ftLastAccessTime.dwLowDateTime=0x725a6050, ftLastAccessTime.dwHighDateTime=0x1d5dd2d, ftLastWriteTime.dwLowDateTime=0x725a6050, ftLastWriteTime.dwHighDateTime=0x1d5dd2d, nFileSizeHigh=0x0, nFileSizeLow=0x936d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TT N1wwOM6PyRTKu.mp4", cAlternateFileName="TTN1WW~1.MP4")) returned 1 [0150.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b32b070, ftCreationTime.dwHighDateTime=0x1d5e003, ftLastAccessTime.dwLowDateTime=0xbcc0e6b0, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0xbcc0e6b0, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0xcb49, dwReserved0=0x0, dwReserved1=0x0, cFileName="vjLAeD.jpg", cAlternateFileName="")) returned 1 [0150.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f1a3f60, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcdd33a0, ftLastAccessTime.dwHighDateTime=0x1d5e779, ftLastWriteTime.dwLowDateTime=0xcdd33a0, ftLastWriteTime.dwHighDateTime=0x1d5e779, nFileSizeHigh=0x0, nFileSizeLow=0x9172, dwReserved0=0x0, dwReserved1=0x0, cFileName="wKku4 WRK9c4IZ.gif", cAlternateFileName="WKKU4W~1.GIF")) returned 1 [0150.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.426] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_", lpFilePart=0x0) returned 0x3a [0150.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\", lpFilePart=0x0) returned 0x3b [0150.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553ec710, ftCreationTime.dwHighDateTime=0x1d5db28, ftLastAccessTime.dwLowDateTime=0x671046f0, ftLastAccessTime.dwHighDateTime=0x1d5d987, ftLastWriteTime.dwLowDateTime=0x671046f0, ftLastWriteTime.dwHighDateTime=0x1d5d987, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb42f10, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0xf3d22b60, ftLastAccessTime.dwHighDateTime=0x1d5e6f9, ftLastWriteTime.dwLowDateTime=0xf3d22b60, ftLastWriteTime.dwHighDateTime=0x1d5e6f9, nFileSizeHigh=0x0, nFileSizeLow=0x269a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0yJ4QBY.mp4", cAlternateFileName="")) returned 1 [0150.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a54ed0, ftCreationTime.dwHighDateTime=0x1d5ddb4, ftLastAccessTime.dwLowDateTime=0x88976300, ftLastAccessTime.dwHighDateTime=0x1d5e745, ftLastWriteTime.dwLowDateTime=0x88976300, ftLastWriteTime.dwHighDateTime=0x1d5e745, nFileSizeHigh=0x0, nFileSizeLow=0xbd85, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKFVNq5 CkL63JM.flv", cAlternateFileName="FKFVNQ~1.FLV")) returned 1 [0150.428] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a9dcea0, ftCreationTime.dwHighDateTime=0x1d5d835, ftLastAccessTime.dwLowDateTime=0x725a6050, ftLastAccessTime.dwHighDateTime=0x1d5dd2d, ftLastWriteTime.dwLowDateTime=0x725a6050, ftLastWriteTime.dwHighDateTime=0x1d5dd2d, nFileSizeHigh=0x0, nFileSizeLow=0x936d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TT N1wwOM6PyRTKu.mp4", cAlternateFileName="TTN1WW~1.MP4")) returned 1 [0150.429] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b32b070, ftCreationTime.dwHighDateTime=0x1d5e003, ftLastAccessTime.dwLowDateTime=0xbcc0e6b0, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0xbcc0e6b0, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0xcb49, dwReserved0=0x0, dwReserved1=0x0, cFileName="vjLAeD.jpg", cAlternateFileName="")) returned 1 [0150.429] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f1a3f60, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcdd33a0, ftLastAccessTime.dwHighDateTime=0x1d5e779, ftLastWriteTime.dwLowDateTime=0xcdd33a0, ftLastWriteTime.dwHighDateTime=0x1d5e779, nFileSizeHigh=0x0, nFileSizeLow=0x9172, dwReserved0=0x0, dwReserved1=0x0, cFileName="wKku4 WRK9c4IZ.gif", cAlternateFileName="WKKU4W~1.GIF")) returned 1 [0150.430] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f1a3f60, ftCreationTime.dwHighDateTime=0x1d5dfbe, ftLastAccessTime.dwLowDateTime=0xcdd33a0, ftLastAccessTime.dwHighDateTime=0x1d5e779, ftLastWriteTime.dwLowDateTime=0xcdd33a0, ftLastWriteTime.dwHighDateTime=0x1d5e779, nFileSizeHigh=0x0, nFileSizeLow=0x9172, dwReserved0=0x0, dwReserved1=0x0, cFileName="wKku4 WRK9c4IZ.gif", cAlternateFileName="WKKU4W~1.GIF")) returned 0 [0150.430] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", lpFilePart=0x0) returned 0x46 [0150.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.431] GetFileType (hFile=0x344) returned 0x1 [0150.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.431] GetFileType (hFile=0x344) returned 0x1 [0150.431] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x269a [0150.431] ReadFile (in: hFile=0x344, lpBuffer=0x27e67b0, nNumberOfBytesToRead=0x269a, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27e67b0*, lpNumberOfBytesRead=0x12dcb8*=0x269a, lpOverlapped=0x0) returned 1 [0150.432] CloseHandle (hObject=0x344) returned 1 [0150.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", lpFilePart=0x0) returned 0x46 [0150.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.492] GetFileType (hFile=0x344) returned 0x1 [0150.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.492] GetFileType (hFile=0x344) returned 0x1 [0150.492] WriteFile (in: hFile=0x344, lpBuffer=0x2845480*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2845480*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.494] CloseHandle (hObject=0x344) returned 1 [0150.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", lpFilePart=0x0) returned 0x46 [0150.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.495] GetFileType (hFile=0x344) returned 0x1 [0150.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.495] GetFileType (hFile=0x344) returned 0x1 [0150.495] WriteFile (in: hFile=0x344, lpBuffer=0x2841768*, nNumberOfBytesToWrite=0x26a0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2841768*, lpNumberOfBytesWritten=0x12dd18*=0x26a0, lpOverlapped=0x0) returned 1 [0150.497] CloseHandle (hObject=0x344) returned 1 [0150.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4", lpFilePart=0x0) returned 0x46 [0150.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x50 [0150.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb42f10, ftCreationTime.dwHighDateTime=0x1d5e665, ftLastAccessTime.dwLowDateTime=0xf3d22b60, ftLastAccessTime.dwHighDateTime=0x1d5e6f9, ftLastWriteTime.dwLowDateTime=0x7c120e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x26a0)) returned 1 [0150.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\0yJ4QBY.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\0yj4qby.mp4.symmyware")) returned 1 [0150.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", lpFilePart=0x0) returned 0x4e [0150.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.500] GetFileType (hFile=0x344) returned 0x1 [0150.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.500] GetFileType (hFile=0x344) returned 0x1 [0150.500] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xbd85 [0150.500] ReadFile (in: hFile=0x344, lpBuffer=0x28469c8, nNumberOfBytesToRead=0xbd85, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28469c8*, lpNumberOfBytesRead=0x12dcb8*=0xbd85, lpOverlapped=0x0) returned 1 [0150.502] CloseHandle (hObject=0x344) returned 1 [0150.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", lpFilePart=0x0) returned 0x4e [0150.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.519] GetFileType (hFile=0x344) returned 0x1 [0150.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.519] GetFileType (hFile=0x344) returned 0x1 [0150.519] WriteFile (in: hFile=0x344, lpBuffer=0x28c6540*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28c6540*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.521] CloseHandle (hObject=0x344) returned 1 [0150.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", lpFilePart=0x0) returned 0x4e [0150.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.523] GetFileType (hFile=0x344) returned 0x1 [0150.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.523] GetFileType (hFile=0x344) returned 0x1 [0150.523] WriteFile (in: hFile=0x344, lpBuffer=0x28b9118*, nNumberOfBytesToWrite=0xbd90, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28b9118*, lpNumberOfBytesWritten=0x12dd18*=0xbd90, lpOverlapped=0x0) returned 1 [0150.527] CloseHandle (hObject=0x344) returned 1 [0150.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv", lpFilePart=0x0) returned 0x4e [0150.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv.SYMMYWARE", lpFilePart=0x0) returned 0x58 [0150.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a54ed0, ftCreationTime.dwHighDateTime=0x1d5ddb4, ftLastAccessTime.dwLowDateTime=0x88976300, ftLastAccessTime.dwHighDateTime=0x1d5e745, ftLastWriteTime.dwLowDateTime=0x7c58db0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbd90)) returned 1 [0150.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\FKFVNq5 CkL63JM.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\fkfvnq5 ckl63jm.flv.symmyware")) returned 1 [0150.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", lpFilePart=0x0) returned 0x4f [0150.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.530] GetFileType (hFile=0x344) returned 0x1 [0150.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.530] GetFileType (hFile=0x344) returned 0x1 [0150.530] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x936d [0150.530] ReadFile (in: hFile=0x344, lpBuffer=0x28c7ae0, nNumberOfBytesToRead=0x936d, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28c7ae0*, lpNumberOfBytesRead=0x12dcb8*=0x936d, lpOverlapped=0x0) returned 1 [0150.532] CloseHandle (hObject=0x344) returned 1 [0150.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", lpFilePart=0x0) returned 0x4f [0150.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.559] GetFileType (hFile=0x344) returned 0x1 [0150.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.560] GetFileType (hFile=0x344) returned 0x1 [0150.560] WriteFile (in: hFile=0x344, lpBuffer=0x294f4b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x294f4b8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.562] CloseHandle (hObject=0x344) returned 1 [0150.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", lpFilePart=0x0) returned 0x4f [0150.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.563] GetFileType (hFile=0x344) returned 0x1 [0150.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.563] GetFileType (hFile=0x344) returned 0x1 [0150.563] WriteFile (in: hFile=0x344, lpBuffer=0x2944aa8*, nNumberOfBytesToWrite=0x9370, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2944aa8*, lpNumberOfBytesWritten=0x12dd18*=0x9370, lpOverlapped=0x0) returned 1 [0150.565] CloseHandle (hObject=0x344) returned 1 [0150.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4", lpFilePart=0x0) returned 0x4f [0150.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x59 [0150.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a9dcea0, ftCreationTime.dwHighDateTime=0x1d5d835, ftLastAccessTime.dwLowDateTime=0x725a6050, ftLastAccessTime.dwHighDateTime=0x1d5dd2d, ftLastWriteTime.dwLowDateTime=0x7cb8120, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9370)) returned 1 [0150.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.566] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\TT N1wwOM6PyRTKu.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\tt n1wwom6pyrtku.mp4.symmyware")) returned 1 [0150.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", lpFilePart=0x0) returned 0x45 [0150.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.568] GetFileType (hFile=0x344) returned 0x1 [0150.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.568] GetFileType (hFile=0x344) returned 0x1 [0150.568] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xcb49 [0150.569] ReadFile (in: hFile=0x344, lpBuffer=0x2950a38, nNumberOfBytesToRead=0xcb49, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2950a38*, lpNumberOfBytesRead=0x12dcb8*=0xcb49, lpOverlapped=0x0) returned 1 [0150.571] CloseHandle (hObject=0x344) returned 1 [0150.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", lpFilePart=0x0) returned 0x45 [0150.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.637] GetFileType (hFile=0x344) returned 0x1 [0150.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.637] GetFileType (hFile=0x344) returned 0x1 [0150.637] WriteFile (in: hFile=0x344, lpBuffer=0x2736f50*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2736f50*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.639] CloseHandle (hObject=0x344) returned 1 [0150.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", lpFilePart=0x0) returned 0x45 [0150.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.641] GetFileType (hFile=0x344) returned 0x1 [0150.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.641] GetFileType (hFile=0x344) returned 0x1 [0150.641] WriteFile (in: hFile=0x344, lpBuffer=0x2728d88*, nNumberOfBytesToWrite=0xcb50, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2728d88*, lpNumberOfBytesWritten=0x12dd18*=0xcb50, lpOverlapped=0x0) returned 1 [0150.643] CloseHandle (hObject=0x344) returned 1 [0150.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg", lpFilePart=0x0) returned 0x45 [0150.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4f [0150.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b32b070, ftCreationTime.dwHighDateTime=0x1d5e003, ftLastAccessTime.dwLowDateTime=0xbcc0e6b0, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x7d6f2d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xcb50)) returned 1 [0150.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.644] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\vjLAeD.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\vjlaed.jpg.symmyware")) returned 1 [0150.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0150.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0150.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4qmNmCzcsh8uy0HQiw-_\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4qmnmczcsh8uy0hqiw-_\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.647] GetFileType (hFile=0x344) returned 0x1 [0150.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0150.647] GetFileType (hFile=0x344) returned 0x1 [0150.648] WriteFile (in: hFile=0x344, lpBuffer=0x273a570*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x273a570*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0150.649] CloseHandle (hObject=0x344) returned 1 [0150.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp", lpFilePart=0x0) returned 0x3a [0150.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\", lpFilePart=0x0) returned 0x3b [0150.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177a9680, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xf48f71d0, ftLastAccessTime.dwHighDateTime=0x1d5dd3e, ftLastWriteTime.dwLowDateTime=0xf48f71d0, ftLastWriteTime.dwHighDateTime=0x1d5dd3e, nFileSizeHigh=0x0, nFileSizeLow=0x5122, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqHfr9.mkv", cAlternateFileName="")) returned 1 [0150.650] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac71d3f0, ftCreationTime.dwHighDateTime=0x1d5dae3, ftLastAccessTime.dwLowDateTime=0x10eca9f0, ftLastAccessTime.dwHighDateTime=0x1d5d8ea, ftLastWriteTime.dwLowDateTime=0x10eca9f0, ftLastWriteTime.dwHighDateTime=0x1d5d8ea, nFileSizeHigh=0x0, nFileSizeLow=0x39af, dwReserved0=0x0, dwReserved1=0x0, cFileName="HHI K6I.wav", cAlternateFileName="HHIK6I~1.WAV")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a5950, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0x8e837290, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0x8e837290, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0x21ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kk1Iq0N wBoeb_lvxI.swf", cAlternateFileName="KK1IQ0~1.SWF")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215b1eb0, ftCreationTime.dwHighDateTime=0x1d5d80a, ftLastAccessTime.dwLowDateTime=0x9f0d53e0, ftLastAccessTime.dwHighDateTime=0x1d5d7de, ftLastWriteTime.dwLowDateTime=0x9f0d53e0, ftLastWriteTime.dwHighDateTime=0x1d5d7de, nFileSizeHigh=0x0, nFileSizeLow=0xcaba, dwReserved0=0x0, dwReserved1=0x0, cFileName="nQ-J J7mSDL4.mkv", cAlternateFileName="NQ-JJ7~1.MKV")) returned 1 [0150.651] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9429c10, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0x61746f10, ftLastAccessTime.dwHighDateTime=0x1d5e507, ftLastWriteTime.dwLowDateTime=0x61746f10, ftLastWriteTime.dwHighDateTime=0x1d5e507, nFileSizeHigh=0x0, nFileSizeLow=0x10ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pfgjirhi7sj.rtf", cAlternateFileName="PFGJIR~1.RTF")) returned 1 [0150.652] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.652] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp", lpFilePart=0x0) returned 0x3a [0150.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\", lpFilePart=0x0) returned 0x3b [0150.652] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f5f4ed0, ftCreationTime.dwHighDateTime=0x1d5e2de, ftLastAccessTime.dwLowDateTime=0x6738e1b0, ftLastAccessTime.dwHighDateTime=0x1d5e197, ftLastWriteTime.dwLowDateTime=0x6738e1b0, ftLastWriteTime.dwHighDateTime=0x1d5e197, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177a9680, ftCreationTime.dwHighDateTime=0x1d5e301, ftLastAccessTime.dwLowDateTime=0xf48f71d0, ftLastAccessTime.dwHighDateTime=0x1d5dd3e, ftLastWriteTime.dwLowDateTime=0xf48f71d0, ftLastWriteTime.dwHighDateTime=0x1d5dd3e, nFileSizeHigh=0x0, nFileSizeLow=0x5122, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqHfr9.mkv", cAlternateFileName="")) returned 1 [0150.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac71d3f0, ftCreationTime.dwHighDateTime=0x1d5dae3, ftLastAccessTime.dwLowDateTime=0x10eca9f0, ftLastAccessTime.dwHighDateTime=0x1d5d8ea, ftLastWriteTime.dwLowDateTime=0x10eca9f0, ftLastWriteTime.dwHighDateTime=0x1d5d8ea, nFileSizeHigh=0x0, nFileSizeLow=0x39af, dwReserved0=0x0, dwReserved1=0x0, cFileName="HHI K6I.wav", cAlternateFileName="HHIK6I~1.WAV")) returned 1 [0150.653] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a5950, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0x8e837290, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0x8e837290, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0x21ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kk1Iq0N wBoeb_lvxI.swf", cAlternateFileName="KK1IQ0~1.SWF")) returned 1 [0150.654] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215b1eb0, ftCreationTime.dwHighDateTime=0x1d5d80a, ftLastAccessTime.dwLowDateTime=0x9f0d53e0, ftLastAccessTime.dwHighDateTime=0x1d5d7de, ftLastWriteTime.dwLowDateTime=0x9f0d53e0, ftLastWriteTime.dwHighDateTime=0x1d5d7de, nFileSizeHigh=0x0, nFileSizeLow=0xcaba, dwReserved0=0x0, dwReserved1=0x0, cFileName="nQ-J J7mSDL4.mkv", cAlternateFileName="NQ-JJ7~1.MKV")) returned 1 [0150.654] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9429c10, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0x61746f10, ftLastAccessTime.dwHighDateTime=0x1d5e507, ftLastWriteTime.dwLowDateTime=0x61746f10, ftLastWriteTime.dwHighDateTime=0x1d5e507, nFileSizeHigh=0x0, nFileSizeLow=0x10ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pfgjirhi7sj.rtf", cAlternateFileName="PFGJIR~1.RTF")) returned 1 [0150.654] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9429c10, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0x61746f10, ftLastAccessTime.dwHighDateTime=0x1d5e507, ftLastWriteTime.dwLowDateTime=0x61746f10, ftLastWriteTime.dwHighDateTime=0x1d5e507, nFileSizeHigh=0x0, nFileSizeLow=0x10ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pfgjirhi7sj.rtf", cAlternateFileName="PFGJIR~1.RTF")) returned 0 [0150.655] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0150.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0150.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", lpFilePart=0x0) returned 0x4a [0150.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.655] GetFileType (hFile=0x344) returned 0x1 [0150.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.655] GetFileType (hFile=0x344) returned 0x1 [0150.655] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x10ffb [0150.656] ReadFile (in: hFile=0x344, lpBuffer=0x273ecb0, nNumberOfBytesToRead=0x10ffb, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x273ecb0*, lpNumberOfBytesRead=0x12dcb8*=0x10ffb, lpOverlapped=0x0) returned 1 [0150.657] CloseHandle (hObject=0x344) returned 1 [0150.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", lpFilePart=0x0) returned 0x4a [0150.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0150.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.723] GetFileType (hFile=0x344) returned 0x1 [0150.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0150.723] GetFileType (hFile=0x344) returned 0x1 [0150.723] WriteFile (in: hFile=0x344, lpBuffer=0x27d33c0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27d33c0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0150.724] CloseHandle (hObject=0x344) returned 1 [0150.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", lpFilePart=0x0) returned 0x4a [0150.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0150.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.726] GetFileType (hFile=0x344) returned 0x1 [0150.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0150.726] GetFileType (hFile=0x344) returned 0x1 [0150.726] WriteFile (in: hFile=0x344, lpBuffer=0x27c0d38*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27c0d38*, lpNumberOfBytesWritten=0x12dd18*=0x11000, lpOverlapped=0x0) returned 1 [0150.730] CloseHandle (hObject=0x344) returned 1 [0150.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf", lpFilePart=0x0) returned 0x4a [0150.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf.SYMMYWARE", lpFilePart=0x0) returned 0x54 [0150.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0150.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9429c10, ftCreationTime.dwHighDateTime=0x1d5e190, ftLastAccessTime.dwLowDateTime=0x61746f10, ftLastAccessTime.dwHighDateTime=0x1d5e507, ftLastWriteTime.dwLowDateTime=0x7e3c410, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0150.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0150.731] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\Pfgjirhi7sj.rtf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\pfgjirhi7sj.rtf.symmyware")) returned 1 [0150.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0150.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0150.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6UbGEc4xt0Gd4lUKNaGp\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6ubgec4xt0gd4luknagp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.736] GetFileType (hFile=0x344) returned 0x1 [0150.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0150.736] GetFileType (hFile=0x344) returned 0x1 [0150.737] WriteFile (in: hFile=0x344, lpBuffer=0x27d69f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27d69f0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0150.738] CloseHandle (hObject=0x344) returned 1 [0150.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0150.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0150.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.770] GetFileType (hFile=0x344) returned 0x1 [0150.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0150.770] GetFileType (hFile=0x344) returned 0x1 [0150.771] WriteFile (in: hFile=0x344, lpBuffer=0x27d9c68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27d9c68*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0150.773] CloseHandle (hObject=0x344) returned 1 [0150.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0150.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0150.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0150.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.774] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd21b6840, ftCreationTime.dwHighDateTime=0x1d5de27, ftLastAccessTime.dwLowDateTime=0xd980d5b0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0xd980d5b0, ftLastWriteTime.dwHighDateTime=0x1d5dda1, nFileSizeHigh=0x0, nFileSizeLow=0x16548, dwReserved0=0x0, dwReserved1=0x0, cFileName="0m6YmUVFaqn-LyeRS_.doc", cAlternateFileName="0M6YMU~1.DOC")) returned 1 [0150.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1e3170, ftCreationTime.dwHighDateTime=0x1d5b8e1, ftLastAccessTime.dwLowDateTime=0xa74cdc0, ftLastAccessTime.dwHighDateTime=0x1d56043, ftLastWriteTime.dwLowDateTime=0xa74cdc0, ftLastWriteTime.dwHighDateTime=0x1d56043, nFileSizeHigh=0x0, nFileSizeLow=0x11062, dwReserved0=0x0, dwReserved1=0x0, cFileName="0YLf_.xlsx", cAlternateFileName="0YLF_~1.XLS")) returned 1 [0150.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4a0460, ftCreationTime.dwHighDateTime=0x1d5cbed, ftLastAccessTime.dwLowDateTime=0x6c13d40, ftLastAccessTime.dwHighDateTime=0x1d55fe3, ftLastWriteTime.dwLowDateTime=0x6c13d40, ftLastWriteTime.dwHighDateTime=0x1d55fe3, nFileSizeHigh=0x0, nFileSizeLow=0x13635, dwReserved0=0x0, dwReserved1=0x0, cFileName="8LYD-TicAXjrF.docx", cAlternateFileName="8LYD-T~1.DOC")) returned 1 [0150.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6ffc160, ftCreationTime.dwHighDateTime=0x1d57ebe, ftLastAccessTime.dwLowDateTime=0xe776dd40, ftLastAccessTime.dwHighDateTime=0x1d596ed, ftLastWriteTime.dwLowDateTime=0xe776dd40, ftLastWriteTime.dwHighDateTime=0x1d596ed, nFileSizeHigh=0x0, nFileSizeLow=0x1a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="a0i9.pptx", cAlternateFileName="A0I9~1.PPT")) returned 1 [0150.775] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa559d990, ftCreationTime.dwHighDateTime=0x1d5bd75, ftLastAccessTime.dwLowDateTime=0xc7d9d230, ftLastAccessTime.dwHighDateTime=0x1d5d252, ftLastWriteTime.dwLowDateTime=0xc7d9d230, ftLastWriteTime.dwHighDateTime=0x1d5d252, nFileSizeHigh=0x0, nFileSizeLow=0x16edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AaGniQb.xlsx", cAlternateFileName="AAGNIQ~1.XLS")) returned 1 [0150.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283ab6e0, ftCreationTime.dwHighDateTime=0x1d5df72, ftLastAccessTime.dwLowDateTime=0xae9a0540, ftLastAccessTime.dwHighDateTime=0x1d57313, ftLastWriteTime.dwLowDateTime=0xae9a0540, ftLastWriteTime.dwHighDateTime=0x1d57313, nFileSizeHigh=0x0, nFileSizeLow=0x9566, dwReserved0=0x0, dwReserved1=0x0, cFileName="CF9r-k.pptx", cAlternateFileName="CF9R-K~1.PPT")) returned 1 [0150.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5d1890, ftCreationTime.dwHighDateTime=0x1d5c1a0, ftLastAccessTime.dwLowDateTime=0xa3fbc9e0, ftLastAccessTime.dwHighDateTime=0x1d5bca9, ftLastWriteTime.dwLowDateTime=0xa3fbc9e0, ftLastWriteTime.dwHighDateTime=0x1d5bca9, nFileSizeHigh=0x0, nFileSizeLow=0xf307, dwReserved0=0x0, dwReserved1=0x0, cFileName="cM9HVu7lIT6l_T_.pptx", cAlternateFileName="CM9HVU~1.PPT")) returned 1 [0150.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0150.776] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc055f0, ftCreationTime.dwHighDateTime=0x1d56862, ftLastAccessTime.dwLowDateTime=0x26520360, ftLastAccessTime.dwHighDateTime=0x1d55c91, ftLastWriteTime.dwLowDateTime=0x26520360, ftLastWriteTime.dwHighDateTime=0x1d55c91, nFileSizeHigh=0x0, nFileSizeLow=0x8de7, dwReserved0=0x0, dwReserved1=0x0, cFileName="eyzJF_srrTgX1OEApMZ.xlsx", cAlternateFileName="EYZJF_~1.XLS")) returned 1 [0150.777] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524c770, ftCreationTime.dwHighDateTime=0x1d56abc, ftLastAccessTime.dwLowDateTime=0x2a3fc930, ftLastAccessTime.dwHighDateTime=0x1d5d9e1, ftLastWriteTime.dwLowDateTime=0x2a3fc930, ftLastWriteTime.dwHighDateTime=0x1d5d9e1, nFileSizeHigh=0x0, nFileSizeLow=0x16188, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsS5b4JrMQGfwxTfuA.xlsx", cAlternateFileName="GSS5B4~1.XLS")) returned 1 [0150.777] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iyEykYnqxmG6o", cAlternateFileName="IYEYKY~1")) returned 1 [0150.777] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cb01d0, ftCreationTime.dwHighDateTime=0x1d5c71b, ftLastAccessTime.dwLowDateTime=0x2002410, ftLastAccessTime.dwHighDateTime=0x1d5d6c6, ftLastWriteTime.dwLowDateTime=0x2002410, ftLastWriteTime.dwHighDateTime=0x1d5d6c6, nFileSizeHigh=0x0, nFileSizeLow=0x13f2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JgDqEB8 dLm3DLJ12Nw.docx", cAlternateFileName="JGDQEB~1.DOC")) returned 1 [0150.777] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KIPiMPWP4zCxPrL", cAlternateFileName="KIPIMP~1")) returned 1 [0150.778] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1cae90, ftCreationTime.dwHighDateTime=0x1d5a5fb, ftLastAccessTime.dwLowDateTime=0xf0069ae0, ftLastAccessTime.dwHighDateTime=0x1d5965c, ftLastWriteTime.dwLowDateTime=0xf0069ae0, ftLastWriteTime.dwHighDateTime=0x1d5965c, nFileSizeHigh=0x0, nFileSizeLow=0x3a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MD_n8tlrh.docx", cAlternateFileName="MD_N8T~1.DOC")) returned 1 [0150.778] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191c05a0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0x4d137530, ftLastAccessTime.dwHighDateTime=0x1d5e28b, ftLastWriteTime.dwLowDateTime=0x4d137530, ftLastWriteTime.dwHighDateTime=0x1d5e28b, nFileSizeHigh=0x0, nFileSizeLow=0xe2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqNWCHGm5SdChk.rtf", cAlternateFileName="MQNWCH~1.RTF")) returned 1 [0150.778] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0150.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0150.779] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5412150, ftCreationTime.dwHighDateTime=0x1d5d7b5, ftLastAccessTime.dwLowDateTime=0x2aa2e910, ftLastAccessTime.dwHighDateTime=0x1d5e13a, ftLastWriteTime.dwLowDateTime=0x2aa2e910, ftLastWriteTime.dwHighDateTime=0x1d5e13a, nFileSizeHigh=0x0, nFileSizeLow=0x14c96, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ohD UP_epxafIcTmFiS.docx", cAlternateFileName="OHDUP_~1.DOC")) returned 1 [0150.797] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ffe5e0, ftCreationTime.dwHighDateTime=0x1d576e9, ftLastAccessTime.dwLowDateTime=0x353eaa00, ftLastAccessTime.dwHighDateTime=0x1d5baaf, ftLastWriteTime.dwLowDateTime=0x353eaa00, ftLastWriteTime.dwHighDateTime=0x1d5baaf, nFileSizeHigh=0x0, nFileSizeLow=0x5912, dwReserved0=0x0, dwReserved1=0x0, cFileName="q 6Svgp.pptx", cAlternateFileName="Q6SVGP~1.PPT")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3745f180, ftCreationTime.dwHighDateTime=0x1d5b2f5, ftLastAccessTime.dwLowDateTime=0xccb6cd10, ftLastAccessTime.dwHighDateTime=0x1d584ca, ftLastWriteTime.dwLowDateTime=0xccb6cd10, ftLastWriteTime.dwHighDateTime=0x1d584ca, nFileSizeHigh=0x0, nFileSizeLow=0x13427, dwReserved0=0x0, dwReserved1=0x0, cFileName="qFQxIt ehCrrXy.docx", cAlternateFileName="QFQXIT~1.DOC")) returned 1 [0150.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae78fb0, ftCreationTime.dwHighDateTime=0x1d5d8d5, ftLastAccessTime.dwLowDateTime=0x4d9299e0, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x4d9299e0, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x11b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TMxR4PSAYVZ9PguvW.csv", cAlternateFileName="TMXR4P~1.CSV")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadab3c10, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0xeb1a0170, ftLastAccessTime.dwHighDateTime=0x1d5e6ca, ftLastWriteTime.dwLowDateTime=0xeb1a0170, ftLastWriteTime.dwHighDateTime=0x1d5e6ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="tPsMceWKAb.rtf", cAlternateFileName="TPSMCE~1.RTF")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cebd710, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x6e46d10, ftLastAccessTime.dwHighDateTime=0x1d5e724, ftLastWriteTime.dwLowDateTime=0x6e46d10, ftLastWriteTime.dwHighDateTime=0x1d5e724, nFileSizeHigh=0x0, nFileSizeLow=0x124ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="tskUj8UpB.ppt", cAlternateFileName="TSKUJ8~1.PPT")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e202d0, ftCreationTime.dwHighDateTime=0x1d5d73d, ftLastAccessTime.dwLowDateTime=0x7dac980, ftLastAccessTime.dwHighDateTime=0x1d5d595, ftLastWriteTime.dwLowDateTime=0x7dac980, ftLastWriteTime.dwHighDateTime=0x1d5d595, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uaw2JpqzILQ7kxD-M.docx", cAlternateFileName="UAW2JP~1.DOC")) returned 1 [0150.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f3d070, ftCreationTime.dwHighDateTime=0x1d5cad7, ftLastAccessTime.dwLowDateTime=0x63f86cb0, ftLastAccessTime.dwHighDateTime=0x1d581b0, ftLastWriteTime.dwLowDateTime=0x63f86cb0, ftLastWriteTime.dwHighDateTime=0x1d581b0, nFileSizeHigh=0x0, nFileSizeLow=0x1616, dwReserved0=0x0, dwReserved1=0x0, cFileName="VA3P6brku4aeXt BJe.pptx", cAlternateFileName="VA3P6B~1.PPT")) returned 1 [0150.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4c5a50, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0xa6b3d860, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0xa6b3d860, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9e05, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmQ-v6b7KWSfxJmcPHJt.pptx", cAlternateFileName="XMQ-V6~1.PPT")) returned 1 [0150.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92213e50, ftCreationTime.dwHighDateTime=0x1d597b3, ftLastAccessTime.dwLowDateTime=0x4f79fd20, ftLastAccessTime.dwHighDateTime=0x1d590b6, ftLastWriteTime.dwLowDateTime=0x4f79fd20, ftLastWriteTime.dwHighDateTime=0x1d590b6, nFileSizeHigh=0x0, nFileSizeLow=0x18e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ew5FA.xlsx", cAlternateFileName="_EW5FA~1.XLS")) returned 1 [0150.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.817] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0150.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0150.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0150.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0150.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0150.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0150.818] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdaceb520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdaceb520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd21b6840, ftCreationTime.dwHighDateTime=0x1d5de27, ftLastAccessTime.dwLowDateTime=0xd980d5b0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0xd980d5b0, ftLastWriteTime.dwHighDateTime=0x1d5dda1, nFileSizeHigh=0x0, nFileSizeLow=0x16548, dwReserved0=0x0, dwReserved1=0x0, cFileName="0m6YmUVFaqn-LyeRS_.doc", cAlternateFileName="0M6YMU~1.DOC")) returned 1 [0150.819] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1e3170, ftCreationTime.dwHighDateTime=0x1d5b8e1, ftLastAccessTime.dwLowDateTime=0xa74cdc0, ftLastAccessTime.dwHighDateTime=0x1d56043, ftLastWriteTime.dwLowDateTime=0xa74cdc0, ftLastWriteTime.dwHighDateTime=0x1d56043, nFileSizeHigh=0x0, nFileSizeLow=0x11062, dwReserved0=0x0, dwReserved1=0x0, cFileName="0YLf_.xlsx", cAlternateFileName="0YLF_~1.XLS")) returned 1 [0150.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4a0460, ftCreationTime.dwHighDateTime=0x1d5cbed, ftLastAccessTime.dwLowDateTime=0x6c13d40, ftLastAccessTime.dwHighDateTime=0x1d55fe3, ftLastWriteTime.dwLowDateTime=0x6c13d40, ftLastWriteTime.dwHighDateTime=0x1d55fe3, nFileSizeHigh=0x0, nFileSizeLow=0x13635, dwReserved0=0x0, dwReserved1=0x0, cFileName="8LYD-TicAXjrF.docx", cAlternateFileName="8LYD-T~1.DOC")) returned 1 [0150.820] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6ffc160, ftCreationTime.dwHighDateTime=0x1d57ebe, ftLastAccessTime.dwLowDateTime=0xe776dd40, ftLastAccessTime.dwHighDateTime=0x1d596ed, ftLastWriteTime.dwLowDateTime=0xe776dd40, ftLastWriteTime.dwHighDateTime=0x1d596ed, nFileSizeHigh=0x0, nFileSizeLow=0x1a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="a0i9.pptx", cAlternateFileName="A0I9~1.PPT")) returned 1 [0150.821] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa559d990, ftCreationTime.dwHighDateTime=0x1d5bd75, ftLastAccessTime.dwLowDateTime=0xc7d9d230, ftLastAccessTime.dwHighDateTime=0x1d5d252, ftLastWriteTime.dwLowDateTime=0xc7d9d230, ftLastWriteTime.dwHighDateTime=0x1d5d252, nFileSizeHigh=0x0, nFileSizeLow=0x16edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AaGniQb.xlsx", cAlternateFileName="AAGNIQ~1.XLS")) returned 1 [0150.821] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283ab6e0, ftCreationTime.dwHighDateTime=0x1d5df72, ftLastAccessTime.dwLowDateTime=0xae9a0540, ftLastAccessTime.dwHighDateTime=0x1d57313, ftLastWriteTime.dwLowDateTime=0xae9a0540, ftLastWriteTime.dwHighDateTime=0x1d57313, nFileSizeHigh=0x0, nFileSizeLow=0x9566, dwReserved0=0x0, dwReserved1=0x0, cFileName="CF9r-k.pptx", cAlternateFileName="CF9R-K~1.PPT")) returned 1 [0150.821] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5d1890, ftCreationTime.dwHighDateTime=0x1d5c1a0, ftLastAccessTime.dwLowDateTime=0xa3fbc9e0, ftLastAccessTime.dwHighDateTime=0x1d5bca9, ftLastWriteTime.dwLowDateTime=0xa3fbc9e0, ftLastWriteTime.dwHighDateTime=0x1d5bca9, nFileSizeHigh=0x0, nFileSizeLow=0xf307, dwReserved0=0x0, dwReserved1=0x0, cFileName="cM9HVu7lIT6l_T_.pptx", cAlternateFileName="CM9HVU~1.PPT")) returned 1 [0150.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0150.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc055f0, ftCreationTime.dwHighDateTime=0x1d56862, ftLastAccessTime.dwLowDateTime=0x26520360, ftLastAccessTime.dwHighDateTime=0x1d55c91, ftLastWriteTime.dwLowDateTime=0x26520360, ftLastWriteTime.dwHighDateTime=0x1d55c91, nFileSizeHigh=0x0, nFileSizeLow=0x8de7, dwReserved0=0x0, dwReserved1=0x0, cFileName="eyzJF_srrTgX1OEApMZ.xlsx", cAlternateFileName="EYZJF_~1.XLS")) returned 1 [0150.822] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524c770, ftCreationTime.dwHighDateTime=0x1d56abc, ftLastAccessTime.dwLowDateTime=0x2a3fc930, ftLastAccessTime.dwHighDateTime=0x1d5d9e1, ftLastWriteTime.dwLowDateTime=0x2a3fc930, ftLastWriteTime.dwHighDateTime=0x1d5d9e1, nFileSizeHigh=0x0, nFileSizeLow=0x16188, dwReserved0=0x0, dwReserved1=0x0, cFileName="gsS5b4JrMQGfwxTfuA.xlsx", cAlternateFileName="GSS5B4~1.XLS")) returned 1 [0150.823] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iyEykYnqxmG6o", cAlternateFileName="IYEYKY~1")) returned 1 [0150.823] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cb01d0, ftCreationTime.dwHighDateTime=0x1d5c71b, ftLastAccessTime.dwLowDateTime=0x2002410, ftLastAccessTime.dwHighDateTime=0x1d5d6c6, ftLastWriteTime.dwLowDateTime=0x2002410, ftLastWriteTime.dwHighDateTime=0x1d5d6c6, nFileSizeHigh=0x0, nFileSizeLow=0x13f2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JgDqEB8 dLm3DLJ12Nw.docx", cAlternateFileName="JGDQEB~1.DOC")) returned 1 [0150.824] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KIPiMPWP4zCxPrL", cAlternateFileName="KIPIMP~1")) returned 1 [0150.824] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1cae90, ftCreationTime.dwHighDateTime=0x1d5a5fb, ftLastAccessTime.dwLowDateTime=0xf0069ae0, ftLastAccessTime.dwHighDateTime=0x1d5965c, ftLastWriteTime.dwLowDateTime=0xf0069ae0, ftLastWriteTime.dwHighDateTime=0x1d5965c, nFileSizeHigh=0x0, nFileSizeLow=0x3a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MD_n8tlrh.docx", cAlternateFileName="MD_N8T~1.DOC")) returned 1 [0150.825] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191c05a0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0x4d137530, ftLastAccessTime.dwHighDateTime=0x1d5e28b, ftLastWriteTime.dwLowDateTime=0x4d137530, ftLastWriteTime.dwHighDateTime=0x1d5e28b, nFileSizeHigh=0x0, nFileSizeLow=0xe2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqNWCHGm5SdChk.rtf", cAlternateFileName="MQNWCH~1.RTF")) returned 1 [0150.825] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0150.825] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0150.825] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0150.826] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0150.826] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5412150, ftCreationTime.dwHighDateTime=0x1d5d7b5, ftLastAccessTime.dwLowDateTime=0x2aa2e910, ftLastAccessTime.dwHighDateTime=0x1d5e13a, ftLastWriteTime.dwLowDateTime=0x2aa2e910, ftLastWriteTime.dwHighDateTime=0x1d5e13a, nFileSizeHigh=0x0, nFileSizeLow=0x14c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ohD UP_epxafIcTmFiS.docx", cAlternateFileName="OHDUP_~1.DOC")) returned 1 [0150.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0150.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ffe5e0, ftCreationTime.dwHighDateTime=0x1d576e9, ftLastAccessTime.dwLowDateTime=0x353eaa00, ftLastAccessTime.dwHighDateTime=0x1d5baaf, ftLastWriteTime.dwLowDateTime=0x353eaa00, ftLastWriteTime.dwHighDateTime=0x1d5baaf, nFileSizeHigh=0x0, nFileSizeLow=0x5912, dwReserved0=0x0, dwReserved1=0x0, cFileName="q 6Svgp.pptx", cAlternateFileName="Q6SVGP~1.PPT")) returned 1 [0150.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3745f180, ftCreationTime.dwHighDateTime=0x1d5b2f5, ftLastAccessTime.dwLowDateTime=0xccb6cd10, ftLastAccessTime.dwHighDateTime=0x1d584ca, ftLastWriteTime.dwLowDateTime=0xccb6cd10, ftLastWriteTime.dwHighDateTime=0x1d584ca, nFileSizeHigh=0x0, nFileSizeLow=0x13427, dwReserved0=0x0, dwReserved1=0x0, cFileName="qFQxIt ehCrrXy.docx", cAlternateFileName="QFQXIT~1.DOC")) returned 1 [0150.841] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae78fb0, ftCreationTime.dwHighDateTime=0x1d5d8d5, ftLastAccessTime.dwLowDateTime=0x4d9299e0, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x4d9299e0, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x11b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="TMxR4PSAYVZ9PguvW.csv", cAlternateFileName="TMXR4P~1.CSV")) returned 1 [0150.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadab3c10, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0xeb1a0170, ftLastAccessTime.dwHighDateTime=0x1d5e6ca, ftLastWriteTime.dwLowDateTime=0xeb1a0170, ftLastWriteTime.dwHighDateTime=0x1d5e6ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="tPsMceWKAb.rtf", cAlternateFileName="TPSMCE~1.RTF")) returned 1 [0150.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cebd710, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x6e46d10, ftLastAccessTime.dwHighDateTime=0x1d5e724, ftLastWriteTime.dwLowDateTime=0x6e46d10, ftLastWriteTime.dwHighDateTime=0x1d5e724, nFileSizeHigh=0x0, nFileSizeLow=0x124ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="tskUj8UpB.ppt", cAlternateFileName="TSKUJ8~1.PPT")) returned 1 [0150.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e202d0, ftCreationTime.dwHighDateTime=0x1d5d73d, ftLastAccessTime.dwLowDateTime=0x7dac980, ftLastAccessTime.dwHighDateTime=0x1d5d595, ftLastWriteTime.dwLowDateTime=0x7dac980, ftLastWriteTime.dwHighDateTime=0x1d5d595, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uaw2JpqzILQ7kxD-M.docx", cAlternateFileName="UAW2JP~1.DOC")) returned 1 [0150.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f3d070, ftCreationTime.dwHighDateTime=0x1d5cad7, ftLastAccessTime.dwLowDateTime=0x63f86cb0, ftLastAccessTime.dwHighDateTime=0x1d581b0, ftLastWriteTime.dwLowDateTime=0x63f86cb0, ftLastWriteTime.dwHighDateTime=0x1d581b0, nFileSizeHigh=0x0, nFileSizeLow=0x1616, dwReserved0=0x0, dwReserved1=0x0, cFileName="VA3P6brku4aeXt BJe.pptx", cAlternateFileName="VA3P6B~1.PPT")) returned 1 [0150.842] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4c5a50, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0xa6b3d860, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0xa6b3d860, ftLastWriteTime.dwHighDateTime=0x1d5e703, nFileSizeHigh=0x0, nFileSizeLow=0x9e05, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmQ-v6b7KWSfxJmcPHJt.pptx", cAlternateFileName="XMQ-V6~1.PPT")) returned 1 [0150.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92213e50, ftCreationTime.dwHighDateTime=0x1d597b3, ftLastAccessTime.dwLowDateTime=0x4f79fd20, ftLastAccessTime.dwHighDateTime=0x1d590b6, ftLastWriteTime.dwLowDateTime=0x4f79fd20, ftLastWriteTime.dwHighDateTime=0x1d590b6, nFileSizeHigh=0x0, nFileSizeLow=0x18e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ew5FA.xlsx", cAlternateFileName="_EW5FA~1.XLS")) returned 1 [0150.843] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92213e50, ftCreationTime.dwHighDateTime=0x1d597b3, ftLastAccessTime.dwLowDateTime=0x4f79fd20, ftLastAccessTime.dwHighDateTime=0x1d590b6, ftLastWriteTime.dwLowDateTime=0x4f79fd20, ftLastWriteTime.dwHighDateTime=0x1d590b6, nFileSizeHigh=0x0, nFileSizeLow=0x18e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ew5FA.xlsx", cAlternateFileName="_EW5FA~1.XLS")) returned 0 [0150.843] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0150.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0150.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0150.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", lpFilePart=0x0) returned 0x3e [0150.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.844] GetFileType (hFile=0x344) returned 0x1 [0150.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.844] GetFileType (hFile=0x344) returned 0x1 [0150.844] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16548 [0150.845] ReadFile (in: hFile=0x344, lpBuffer=0x12747160, nNumberOfBytesToRead=0x16548, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12747160*, lpNumberOfBytesRead=0x12dd38*=0x16548, lpOverlapped=0x0) returned 1 [0150.848] CloseHandle (hObject=0x344) returned 1 [0150.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", lpFilePart=0x0) returned 0x3e [0150.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.936] GetFileType (hFile=0x344) returned 0x1 [0150.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.936] GetFileType (hFile=0x344) returned 0x1 [0150.936] WriteFile (in: hFile=0x344, lpBuffer=0x2834130*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2834130*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.938] CloseHandle (hObject=0x344) returned 1 [0150.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", lpFilePart=0x0) returned 0x3e [0150.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.941] GetFileType (hFile=0x344) returned 0x1 [0150.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.941] GetFileType (hFile=0x344) returned 0x1 [0150.941] WriteFile (in: hFile=0x344, lpBuffer=0x127b6c88*, nNumberOfBytesToWrite=0x16550, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x127b6c88*, lpNumberOfBytesWritten=0x12dd98*=0x16550, lpOverlapped=0x0) returned 1 [0150.944] CloseHandle (hObject=0x344) returned 1 [0150.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc", lpFilePart=0x0) returned 0x3e [0150.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc.SYMMYWARE", lpFilePart=0x0) returned 0x48 [0150.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd21b6840, ftCreationTime.dwHighDateTime=0x1d5de27, ftLastAccessTime.dwLowDateTime=0xd980d5b0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0x8015e30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x16550)) returned 1 [0150.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.945] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0m6YmUVFaqn-LyeRS_.doc.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0m6ymuvfaqn-lyers_.doc.symmyware")) returned 1 [0150.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", lpFilePart=0x0) returned 0x32 [0150.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.947] GetFileType (hFile=0x344) returned 0x1 [0150.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.947] GetFileType (hFile=0x344) returned 0x1 [0150.948] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x11062 [0150.948] ReadFile (in: hFile=0x344, lpBuffer=0x2835608, nNumberOfBytesToRead=0x11062, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2835608*, lpNumberOfBytesRead=0x12dd38*=0x11062, lpOverlapped=0x0) returned 1 [0150.950] CloseHandle (hObject=0x344) returned 1 [0150.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", lpFilePart=0x0) returned 0x32 [0150.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0150.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0150.989] GetFileType (hFile=0x344) returned 0x1 [0150.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0150.989] GetFileType (hFile=0x344) returned 0x1 [0150.990] WriteFile (in: hFile=0x344, lpBuffer=0x28c9cb8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28c9cb8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0150.991] CloseHandle (hObject=0x344) returned 1 [0150.991] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", lpFilePart=0x0) returned 0x32 [0150.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.992] GetFileType (hFile=0x344) returned 0x1 [0150.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.993] GetFileType (hFile=0x344) returned 0x1 [0150.993] WriteFile (in: hFile=0x344, lpBuffer=0x28b75f8*, nNumberOfBytesToWrite=0x11070, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x28b75f8*, lpNumberOfBytesWritten=0x12dd98*=0x11070, lpOverlapped=0x0) returned 1 [0150.996] CloseHandle (hObject=0x344) returned 1 [0150.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx", lpFilePart=0x0) returned 0x32 [0150.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x3c [0150.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0150.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1e3170, ftCreationTime.dwHighDateTime=0x1d5b8e1, ftLastAccessTime.dwLowDateTime=0xa74cdc0, ftLastAccessTime.dwHighDateTime=0x1d56043, ftLastWriteTime.dwLowDateTime=0x808ff50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11070)) returned 1 [0150.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0150.997] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\0YLf_.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\0ylf_.xlsx.symmyware")) returned 1 [0150.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", lpFilePart=0x0) returned 0x3a [0150.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0150.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0150.998] GetFileType (hFile=0x344) returned 0x1 [0150.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0150.998] GetFileType (hFile=0x344) returned 0x1 [0150.998] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x13635 [0150.999] ReadFile (in: hFile=0x344, lpBuffer=0x28cb138, nNumberOfBytesToRead=0x13635, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28cb138*, lpNumberOfBytesRead=0x12dd38*=0x13635, lpOverlapped=0x0) returned 1 [0151.000] CloseHandle (hObject=0x344) returned 1 [0151.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", lpFilePart=0x0) returned 0x3a [0151.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.106] GetFileType (hFile=0x344) returned 0x1 [0151.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.106] GetFileType (hFile=0x344) returned 0x1 [0151.106] WriteFile (in: hFile=0x344, lpBuffer=0x2770778*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2770778*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.107] CloseHandle (hObject=0x344) returned 1 [0151.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", lpFilePart=0x0) returned 0x3a [0151.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.109] GetFileType (hFile=0x344) returned 0x1 [0151.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.109] GetFileType (hFile=0x344) returned 0x1 [0151.109] WriteFile (in: hFile=0x344, lpBuffer=0x275bac8*, nNumberOfBytesToWrite=0x13640, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x275bac8*, lpNumberOfBytesWritten=0x12dd98*=0x13640, lpOverlapped=0x0) returned 1 [0151.112] CloseHandle (hObject=0x344) returned 1 [0151.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx", lpFilePart=0x0) returned 0x3a [0151.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0151.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c4a0460, ftCreationTime.dwHighDateTime=0x1d5cbed, ftLastAccessTime.dwLowDateTime=0x6c13d40, ftLastAccessTime.dwHighDateTime=0x1d55fe3, ftLastWriteTime.dwLowDateTime=0x819ef40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x13640)) returned 1 [0151.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.112] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8LYD-TicAXjrF.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8lyd-ticaxjrf.docx.symmyware")) returned 1 [0151.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", lpFilePart=0x0) returned 0x31 [0151.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.114] GetFileType (hFile=0x344) returned 0x1 [0151.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.114] GetFileType (hFile=0x344) returned 0x1 [0151.114] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1a12 [0151.114] ReadFile (in: hFile=0x344, lpBuffer=0x2771c28, nNumberOfBytesToRead=0x1a12, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2771c28*, lpNumberOfBytesRead=0x12dd38*=0x1a12, lpOverlapped=0x0) returned 1 [0151.115] CloseHandle (hObject=0x344) returned 1 [0151.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", lpFilePart=0x0) returned 0x31 [0151.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.128] GetFileType (hFile=0x344) returned 0x1 [0151.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.128] GetFileType (hFile=0x344) returned 0x1 [0151.129] WriteFile (in: hFile=0x344, lpBuffer=0x27cbfb8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27cbfb8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.130] CloseHandle (hObject=0x344) returned 1 [0151.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", lpFilePart=0x0) returned 0x31 [0151.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.132] GetFileType (hFile=0x344) returned 0x1 [0151.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.132] GetFileType (hFile=0x344) returned 0x1 [0151.133] WriteFile (in: hFile=0x344, lpBuffer=0x27c8f48*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27c8f48*, lpNumberOfBytesWritten=0x12dd98*=0x1a20, lpOverlapped=0x0) returned 1 [0151.134] CloseHandle (hObject=0x344) returned 1 [0151.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx", lpFilePart=0x0) returned 0x31 [0151.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0151.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6ffc160, ftCreationTime.dwHighDateTime=0x1d57ebe, ftLastAccessTime.dwLowDateTime=0xe776dd40, ftLastAccessTime.dwHighDateTime=0x1d596ed, ftLastWriteTime.dwLowDateTime=0x81d71b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1a20)) returned 1 [0151.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.135] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\a0i9.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a0i9.pptx.symmyware")) returned 1 [0151.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", lpFilePart=0x0) returned 0x34 [0151.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.136] GetFileType (hFile=0x344) returned 0x1 [0151.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.136] GetFileType (hFile=0x344) returned 0x1 [0151.136] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16edb [0151.137] ReadFile (in: hFile=0x344, lpBuffer=0x12815fa0, nNumberOfBytesToRead=0x16edb, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12815fa0*, lpNumberOfBytesRead=0x12dd38*=0x16edb, lpOverlapped=0x0) returned 1 [0151.141] CloseHandle (hObject=0x344) returned 1 [0151.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", lpFilePart=0x0) returned 0x34 [0151.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.175] GetFileType (hFile=0x344) returned 0x1 [0151.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.175] GetFileType (hFile=0x344) returned 0x1 [0151.175] WriteFile (in: hFile=0x344, lpBuffer=0x281d8d8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x281d8d8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.176] CloseHandle (hObject=0x344) returned 1 [0151.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", lpFilePart=0x0) returned 0x34 [0151.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.178] GetFileType (hFile=0x344) returned 0x1 [0151.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.178] GetFileType (hFile=0x344) returned 0x1 [0151.178] WriteFile (in: hFile=0x344, lpBuffer=0x12888aa0*, nNumberOfBytesToWrite=0x16ee0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x12888aa0*, lpNumberOfBytesWritten=0x12dd98*=0x16ee0, lpOverlapped=0x0) returned 1 [0151.180] CloseHandle (hObject=0x344) returned 1 [0151.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx", lpFilePart=0x0) returned 0x34 [0151.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x3e [0151.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa559d990, ftCreationTime.dwHighDateTime=0x1d5bd75, ftLastAccessTime.dwLowDateTime=0xc7d9d230, ftLastAccessTime.dwHighDateTime=0x1d5d252, ftLastWriteTime.dwLowDateTime=0x8242870, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x16ee0)) returned 1 [0151.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.181] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AaGniQb.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\aagniqb.xlsx.symmyware")) returned 1 [0151.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", lpFilePart=0x0) returned 0x33 [0151.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.182] GetFileType (hFile=0x344) returned 0x1 [0151.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.182] GetFileType (hFile=0x344) returned 0x1 [0151.182] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x9566 [0151.182] ReadFile (in: hFile=0x344, lpBuffer=0x281ed50, nNumberOfBytesToRead=0x9566, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x281ed50*, lpNumberOfBytesRead=0x12dd38*=0x9566, lpOverlapped=0x0) returned 1 [0151.184] CloseHandle (hObject=0x344) returned 1 [0151.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", lpFilePart=0x0) returned 0x33 [0151.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.194] GetFileType (hFile=0x344) returned 0x1 [0151.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.194] GetFileType (hFile=0x344) returned 0x1 [0151.194] WriteFile (in: hFile=0x344, lpBuffer=0x28a72d8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28a72d8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.195] CloseHandle (hObject=0x344) returned 1 [0151.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", lpFilePart=0x0) returned 0x33 [0151.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.197] GetFileType (hFile=0x344) returned 0x1 [0151.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.197] GetFileType (hFile=0x344) returned 0x1 [0151.197] WriteFile (in: hFile=0x344, lpBuffer=0x289c718*, nNumberOfBytesToWrite=0x9570, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x289c718*, lpNumberOfBytesWritten=0x12dd98*=0x9570, lpOverlapped=0x0) returned 1 [0151.199] CloseHandle (hObject=0x344) returned 1 [0151.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx", lpFilePart=0x0) returned 0x33 [0151.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x3d [0151.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283ab6e0, ftCreationTime.dwHighDateTime=0x1d5df72, ftLastAccessTime.dwLowDateTime=0xae9a0540, ftLastAccessTime.dwHighDateTime=0x1d57313, ftLastWriteTime.dwLowDateTime=0x826e790, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9570)) returned 1 [0151.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.199] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CF9r-k.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cf9r-k.pptx.symmyware")) returned 1 [0151.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", lpFilePart=0x0) returned 0x3c [0151.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.201] GetFileType (hFile=0x344) returned 0x1 [0151.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.201] GetFileType (hFile=0x344) returned 0x1 [0151.201] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xf307 [0151.201] ReadFile (in: hFile=0x344, lpBuffer=0x28a8768, nNumberOfBytesToRead=0xf307, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28a8768*, lpNumberOfBytesRead=0x12dd38*=0xf307, lpOverlapped=0x0) returned 1 [0151.203] CloseHandle (hObject=0x344) returned 1 [0151.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", lpFilePart=0x0) returned 0x3c [0151.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.260] GetFileType (hFile=0x344) returned 0x1 [0151.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.260] GetFileType (hFile=0x344) returned 0x1 [0151.260] WriteFile (in: hFile=0x344, lpBuffer=0x27315a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27315a0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.262] CloseHandle (hObject=0x344) returned 1 [0151.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", lpFilePart=0x0) returned 0x3c [0151.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.263] GetFileType (hFile=0x344) returned 0x1 [0151.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.263] GetFileType (hFile=0x344) returned 0x1 [0151.263] WriteFile (in: hFile=0x344, lpBuffer=0x2720c10*, nNumberOfBytesToWrite=0xf310, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2720c10*, lpNumberOfBytesWritten=0x12dd98*=0xf310, lpOverlapped=0x0) returned 1 [0151.265] CloseHandle (hObject=0x344) returned 1 [0151.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx", lpFilePart=0x0) returned 0x3c [0151.265] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x46 [0151.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5d1890, ftCreationTime.dwHighDateTime=0x1d5c1a0, ftLastAccessTime.dwLowDateTime=0xa3fbc9e0, ftLastAccessTime.dwHighDateTime=0x1d5bca9, ftLastWriteTime.dwLowDateTime=0x830ab90, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xf310)) returned 1 [0151.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cM9HVu7lIT6l_T_.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cm9hvu7lit6l_t_.pptx.symmyware")) returned 1 [0151.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", lpFilePart=0x0) returned 0x40 [0151.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.272] GetFileType (hFile=0x344) returned 0x1 [0151.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.272] GetFileType (hFile=0x344) returned 0x1 [0151.272] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x8de7 [0151.272] ReadFile (in: hFile=0x344, lpBuffer=0x2732ad0, nNumberOfBytesToRead=0x8de7, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2732ad0*, lpNumberOfBytesRead=0x12dd38*=0x8de7, lpOverlapped=0x0) returned 1 [0151.273] CloseHandle (hObject=0x344) returned 1 [0151.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", lpFilePart=0x0) returned 0x40 [0151.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.282] GetFileType (hFile=0x344) returned 0x1 [0151.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.283] GetFileType (hFile=0x344) returned 0x1 [0151.283] WriteFile (in: hFile=0x344, lpBuffer=0x27b8580*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27b8580*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.284] CloseHandle (hObject=0x344) returned 1 [0151.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", lpFilePart=0x0) returned 0x40 [0151.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.285] GetFileType (hFile=0x344) returned 0x1 [0151.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.285] GetFileType (hFile=0x344) returned 0x1 [0151.285] WriteFile (in: hFile=0x344, lpBuffer=0x27ae100*, nNumberOfBytesToWrite=0x8df0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27ae100*, lpNumberOfBytesWritten=0x12dd98*=0x8df0, lpOverlapped=0x0) returned 1 [0151.287] CloseHandle (hObject=0x344) returned 1 [0151.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx", lpFilePart=0x0) returned 0x40 [0151.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0151.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc055f0, ftCreationTime.dwHighDateTime=0x1d56862, ftLastAccessTime.dwLowDateTime=0x26520360, ftLastAccessTime.dwHighDateTime=0x1d55c91, ftLastWriteTime.dwLowDateTime=0x833b8d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0151.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eyzJF_srrTgX1OEApMZ.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\eyzjf_srrtgx1oeapmz.xlsx.symmyware")) returned 1 [0151.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", lpFilePart=0x0) returned 0x3f [0151.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.292] GetFileType (hFile=0x344) returned 0x1 [0151.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.292] GetFileType (hFile=0x344) returned 0x1 [0151.292] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16188 [0151.293] ReadFile (in: hFile=0x344, lpBuffer=0x128bdff0, nNumberOfBytesToRead=0x16188, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x128bdff0*, lpNumberOfBytesRead=0x12dd38*=0x16188, lpOverlapped=0x0) returned 1 [0151.295] CloseHandle (hObject=0x344) returned 1 [0151.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", lpFilePart=0x0) returned 0x3f [0151.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.311] GetFileType (hFile=0x344) returned 0x1 [0151.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.311] GetFileType (hFile=0x344) returned 0x1 [0151.311] WriteFile (in: hFile=0x344, lpBuffer=0x2809f80*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2809f80*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.312] CloseHandle (hObject=0x344) returned 1 [0151.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", lpFilePart=0x0) returned 0x3f [0151.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.314] GetFileType (hFile=0x344) returned 0x1 [0151.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.314] GetFileType (hFile=0x344) returned 0x1 [0151.314] WriteFile (in: hFile=0x344, lpBuffer=0x1292c858*, nNumberOfBytesToWrite=0x16190, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x1292c858*, lpNumberOfBytesWritten=0x12dd98*=0x16190, lpOverlapped=0x0) returned 1 [0151.317] CloseHandle (hObject=0x344) returned 1 [0151.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx", lpFilePart=0x0) returned 0x3f [0151.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x49 [0151.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524c770, ftCreationTime.dwHighDateTime=0x1d56abc, ftLastAccessTime.dwLowDateTime=0x2a3fc930, ftLastAccessTime.dwHighDateTime=0x1d5d9e1, ftLastWriteTime.dwLowDateTime=0x8384cb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x16190)) returned 1 [0151.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.317] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gsS5b4JrMQGfwxTfuA.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gss5b4jrmqgfwxtfua.xlsx.symmyware")) returned 1 [0151.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", lpFilePart=0x0) returned 0x40 [0151.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.320] GetFileType (hFile=0x344) returned 0x1 [0151.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.320] GetFileType (hFile=0x344) returned 0x1 [0151.320] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x13f2a [0151.320] ReadFile (in: hFile=0x344, lpBuffer=0x280b498, nNumberOfBytesToRead=0x13f2a, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x280b498*, lpNumberOfBytesRead=0x12dd38*=0x13f2a, lpOverlapped=0x0) returned 1 [0151.322] CloseHandle (hObject=0x344) returned 1 [0151.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", lpFilePart=0x0) returned 0x40 [0151.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0151.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0151.645] GetFileType (hFile=0x344) returned 0x1 [0151.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0151.645] GetFileType (hFile=0x344) returned 0x1 [0151.645] WriteFile (in: hFile=0x344, lpBuffer=0x28ab688*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28ab688*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0151.647] CloseHandle (hObject=0x344) returned 1 [0151.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", lpFilePart=0x0) returned 0x40 [0151.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.648] GetFileType (hFile=0x344) returned 0x1 [0151.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.648] GetFileType (hFile=0x344) returned 0x1 [0151.648] WriteFile (in: hFile=0x344, lpBuffer=0x28960c8*, nNumberOfBytesToWrite=0x13f30, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x28960c8*, lpNumberOfBytesWritten=0x12dd98*=0x13f30, lpOverlapped=0x0) returned 1 [0151.650] CloseHandle (hObject=0x344) returned 1 [0151.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx", lpFilePart=0x0) returned 0x40 [0151.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0151.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0151.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cb01d0, ftCreationTime.dwHighDateTime=0x1d5c71b, ftLastAccessTime.dwLowDateTime=0x2002410, ftLastAccessTime.dwHighDateTime=0x1d5d6c6, ftLastWriteTime.dwLowDateTime=0x86a3220, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x13f30)) returned 1 [0151.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0151.651] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\JgDqEB8 dLm3DLJ12Nw.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jgdqeb8 dlm3dlj12nw.docx.symmyware")) returned 1 [0151.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", lpFilePart=0x0) returned 0x36 [0151.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0151.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0151.654] GetFileType (hFile=0x344) returned 0x1 [0151.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0151.655] GetFileType (hFile=0x344) returned 0x1 [0151.655] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x3a71 [0151.655] ReadFile (in: hFile=0x344, lpBuffer=0x28acb88, nNumberOfBytesToRead=0x3a71, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28acb88*, lpNumberOfBytesRead=0x12dd38*=0x3a71, lpOverlapped=0x0) returned 1 [0151.656] CloseHandle (hObject=0x344) returned 1 [0152.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", lpFilePart=0x0) returned 0x36 [0152.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.225] GetFileType (hFile=0x344) returned 0x1 [0152.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.225] GetFileType (hFile=0x344) returned 0x1 [0152.226] WriteFile (in: hFile=0x344, lpBuffer=0x27076d8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27076d8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.227] CloseHandle (hObject=0x344) returned 1 [0152.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", lpFilePart=0x0) returned 0x36 [0152.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.407] GetFileType (hFile=0x344) returned 0x1 [0152.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.407] GetFileType (hFile=0x344) returned 0x1 [0152.407] WriteFile (in: hFile=0x344, lpBuffer=0x27025f8*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27025f8*, lpNumberOfBytesWritten=0x12dd98*=0x3a80, lpOverlapped=0x0) returned 1 [0152.409] CloseHandle (hObject=0x344) returned 1 [0152.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx", lpFilePart=0x0) returned 0x36 [0152.411] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0152.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1cae90, ftCreationTime.dwHighDateTime=0x1d5a5fb, ftLastAccessTime.dwLowDateTime=0xf0069ae0, ftLastAccessTime.dwHighDateTime=0x1d5965c, ftLastWriteTime.dwLowDateTime=0x8d3f070, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3a80)) returned 1 [0152.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.411] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MD_n8tlrh.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\md_n8tlrh.docx.symmyware")) returned 1 [0152.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", lpFilePart=0x0) returned 0x3a [0152.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.413] GetFileType (hFile=0x344) returned 0x1 [0152.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.413] GetFileType (hFile=0x344) returned 0x1 [0152.413] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xe2d9 [0152.413] ReadFile (in: hFile=0x344, lpBuffer=0x2708b80, nNumberOfBytesToRead=0xe2d9, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2708b80*, lpNumberOfBytesRead=0x12dd38*=0xe2d9, lpOverlapped=0x0) returned 1 [0152.415] CloseHandle (hObject=0x344) returned 1 [0152.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", lpFilePart=0x0) returned 0x3a [0152.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.571] GetFileType (hFile=0x344) returned 0x1 [0152.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.571] GetFileType (hFile=0x344) returned 0x1 [0152.571] WriteFile (in: hFile=0x344, lpBuffer=0x2791df8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2791df8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.572] CloseHandle (hObject=0x344) returned 1 [0152.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", lpFilePart=0x0) returned 0x3a [0152.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.575] GetFileType (hFile=0x344) returned 0x1 [0152.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.575] GetFileType (hFile=0x344) returned 0x1 [0152.575] WriteFile (in: hFile=0x344, lpBuffer=0x27824a8*, nNumberOfBytesToWrite=0xe2e0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27824a8*, lpNumberOfBytesWritten=0x12dd98*=0xe2e0, lpOverlapped=0x0) returned 1 [0152.578] CloseHandle (hObject=0x344) returned 1 [0152.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf", lpFilePart=0x0) returned 0x3a [0152.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0152.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191c05a0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0x4d137530, ftLastAccessTime.dwHighDateTime=0x1d5e28b, ftLastWriteTime.dwLowDateTime=0x8ed1dc0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe2e0)) returned 1 [0152.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.579] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mqNWCHGm5SdChk.rtf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mqnwchgm5sdchk.rtf.symmyware")) returned 1 [0152.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", lpFilePart=0x0) returned 0x40 [0152.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.581] GetFileType (hFile=0x344) returned 0x1 [0152.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.581] GetFileType (hFile=0x344) returned 0x1 [0152.581] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x14c96 [0152.582] ReadFile (in: hFile=0x344, lpBuffer=0x12986e70, nNumberOfBytesToRead=0x14c96, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x12986e70*, lpNumberOfBytesRead=0x12dd38*=0x14c96, lpOverlapped=0x0) returned 1 [0152.584] CloseHandle (hObject=0x344) returned 1 [0152.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", lpFilePart=0x0) returned 0x40 [0152.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.702] GetFileType (hFile=0x344) returned 0x1 [0152.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.702] GetFileType (hFile=0x344) returned 0x1 [0152.702] WriteFile (in: hFile=0x344, lpBuffer=0x26c62e0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26c62e0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.703] CloseHandle (hObject=0x344) returned 1 [0152.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", lpFilePart=0x0) returned 0x40 [0152.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.705] GetFileType (hFile=0x344) returned 0x1 [0152.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.706] GetFileType (hFile=0x344) returned 0x1 [0152.706] WriteFile (in: hFile=0x344, lpBuffer=0x1299bb40*, nNumberOfBytesToWrite=0x14ca0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x1299bb40*, lpNumberOfBytesWritten=0x12dd98*=0x14ca0, lpOverlapped=0x0) returned 1 [0152.709] CloseHandle (hObject=0x344) returned 1 [0152.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx", lpFilePart=0x0) returned 0x40 [0152.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0152.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5412150, ftCreationTime.dwHighDateTime=0x1d5d7b5, ftLastAccessTime.dwLowDateTime=0x2aa2e910, ftLastAccessTime.dwHighDateTime=0x1d5e13a, ftLastWriteTime.dwLowDateTime=0x9007eb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14ca0)) returned 1 [0152.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ohD UP_epxafIcTmFiS.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ohd up_epxafictmfis.docx.symmyware")) returned 1 [0152.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", lpFilePart=0x0) returned 0x34 [0152.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.712] GetFileType (hFile=0x344) returned 0x1 [0152.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.712] GetFileType (hFile=0x344) returned 0x1 [0152.712] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5912 [0152.712] ReadFile (in: hFile=0x344, lpBuffer=0x26c77e0, nNumberOfBytesToRead=0x5912, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26c77e0*, lpNumberOfBytesRead=0x12dd38*=0x5912, lpOverlapped=0x0) returned 1 [0152.713] CloseHandle (hObject=0x344) returned 1 [0152.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", lpFilePart=0x0) returned 0x34 [0152.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.849] GetFileType (hFile=0x344) returned 0x1 [0152.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.849] GetFileType (hFile=0x344) returned 0x1 [0152.849] WriteFile (in: hFile=0x344, lpBuffer=0x2739580*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2739580*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.850] CloseHandle (hObject=0x344) returned 1 [0152.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", lpFilePart=0x0) returned 0x34 [0152.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.852] GetFileType (hFile=0x344) returned 0x1 [0152.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.852] GetFileType (hFile=0x344) returned 0x1 [0152.852] WriteFile (in: hFile=0x344, lpBuffer=0x2732600*, nNumberOfBytesToWrite=0x5920, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2732600*, lpNumberOfBytesWritten=0x12dd98*=0x5920, lpOverlapped=0x0) returned 1 [0152.854] CloseHandle (hObject=0x344) returned 1 [0152.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx", lpFilePart=0x0) returned 0x34 [0152.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x3e [0152.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ffe5e0, ftCreationTime.dwHighDateTime=0x1d576e9, ftLastAccessTime.dwLowDateTime=0x353eaa00, ftLastAccessTime.dwHighDateTime=0x1d5baaf, ftLastWriteTime.dwLowDateTime=0x9139180, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5920)) returned 1 [0152.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.855] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\q 6Svgp.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q 6svgp.pptx.symmyware")) returned 1 [0152.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", lpFilePart=0x0) returned 0x3b [0152.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.857] GetFileType (hFile=0x344) returned 0x1 [0152.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.857] GetFileType (hFile=0x344) returned 0x1 [0152.857] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x13427 [0152.857] ReadFile (in: hFile=0x344, lpBuffer=0x273aa18, nNumberOfBytesToRead=0x13427, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x273aa18*, lpNumberOfBytesRead=0x12dd38*=0x13427, lpOverlapped=0x0) returned 1 [0152.859] CloseHandle (hObject=0x344) returned 1 [0152.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", lpFilePart=0x0) returned 0x3b [0152.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.872] GetFileType (hFile=0x344) returned 0x1 [0152.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.872] GetFileType (hFile=0x344) returned 0x1 [0152.872] WriteFile (in: hFile=0x344, lpBuffer=0x27d7fe8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27d7fe8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.873] CloseHandle (hObject=0x344) returned 1 [0152.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", lpFilePart=0x0) returned 0x3b [0152.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.874] GetFileType (hFile=0x344) returned 0x1 [0152.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.874] GetFileType (hFile=0x344) returned 0x1 [0152.874] WriteFile (in: hFile=0x344, lpBuffer=0x27c3548*, nNumberOfBytesToWrite=0x13430, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27c3548*, lpNumberOfBytesWritten=0x12dd98*=0x13430, lpOverlapped=0x0) returned 1 [0152.876] CloseHandle (hObject=0x344) returned 1 [0152.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx", lpFilePart=0x0) returned 0x3b [0152.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx.SYMMYWARE", lpFilePart=0x0) returned 0x45 [0152.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3745f180, ftCreationTime.dwHighDateTime=0x1d5b2f5, ftLastAccessTime.dwLowDateTime=0xccb6cd10, ftLastAccessTime.dwHighDateTime=0x1d584ca, ftLastWriteTime.dwLowDateTime=0x91713f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x13430)) returned 1 [0152.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.877] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qFQxIt ehCrrXy.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qfqxit ehcrrxy.docx.symmyware")) returned 1 [0152.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", lpFilePart=0x0) returned 0x3d [0152.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.878] GetFileType (hFile=0x344) returned 0x1 [0152.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.878] GetFileType (hFile=0x344) returned 0x1 [0152.878] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x11b02 [0152.879] ReadFile (in: hFile=0x344, lpBuffer=0x27d94c8, nNumberOfBytesToRead=0x11b02, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27d94c8*, lpNumberOfBytesRead=0x12dd38*=0x11b02, lpOverlapped=0x0) returned 1 [0152.880] CloseHandle (hObject=0x344) returned 1 [0152.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", lpFilePart=0x0) returned 0x3d [0152.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0152.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0152.892] GetFileType (hFile=0x344) returned 0x1 [0152.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0152.892] GetFileType (hFile=0x344) returned 0x1 [0152.892] WriteFile (in: hFile=0x344, lpBuffer=0x2870628*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2870628*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0152.893] CloseHandle (hObject=0x344) returned 1 [0152.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", lpFilePart=0x0) returned 0x3d [0152.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.895] GetFileType (hFile=0x344) returned 0x1 [0152.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.895] GetFileType (hFile=0x344) returned 0x1 [0152.895] WriteFile (in: hFile=0x344, lpBuffer=0x285d498*, nNumberOfBytesToWrite=0x11b10, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x285d498*, lpNumberOfBytesWritten=0x12dd98*=0x11b10, lpOverlapped=0x0) returned 1 [0152.897] CloseHandle (hObject=0x344) returned 1 [0152.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv", lpFilePart=0x0) returned 0x3d [0152.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv.SYMMYWARE", lpFilePart=0x0) returned 0x47 [0152.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0152.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae78fb0, ftCreationTime.dwHighDateTime=0x1d5d8d5, ftLastAccessTime.dwLowDateTime=0x4d9299e0, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x91a4840, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11b10)) returned 1 [0152.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0152.899] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TMxR4PSAYVZ9PguvW.csv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tmxr4psayvz9pguvw.csv.symmyware")) returned 1 [0152.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", lpFilePart=0x0) returned 0x36 [0152.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0152.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0152.900] GetFileType (hFile=0x344) returned 0x1 [0152.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0152.900] GetFileType (hFile=0x344) returned 0x1 [0152.901] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xe3fa [0152.901] ReadFile (in: hFile=0x344, lpBuffer=0x2871b00, nNumberOfBytesToRead=0xe3fa, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2871b00*, lpNumberOfBytesRead=0x12dd38*=0xe3fa, lpOverlapped=0x0) returned 1 [0152.902] CloseHandle (hObject=0x344) returned 1 [0153.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", lpFilePart=0x0) returned 0x36 [0153.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.104] GetFileType (hFile=0x344) returned 0x1 [0153.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.104] GetFileType (hFile=0x344) returned 0x1 [0153.105] WriteFile (in: hFile=0x344, lpBuffer=0x2709a08*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2709a08*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.106] CloseHandle (hObject=0x344) returned 1 [0153.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", lpFilePart=0x0) returned 0x36 [0153.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.107] GetFileType (hFile=0x344) returned 0x1 [0153.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.108] GetFileType (hFile=0x344) returned 0x1 [0153.108] WriteFile (in: hFile=0x344, lpBuffer=0x26f9fa8*, nNumberOfBytesToWrite=0xe400, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26f9fa8*, lpNumberOfBytesWritten=0x12dd98*=0xe400, lpOverlapped=0x0) returned 1 [0153.110] CloseHandle (hObject=0x344) returned 1 [0153.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf", lpFilePart=0x0) returned 0x36 [0153.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0153.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadab3c10, ftCreationTime.dwHighDateTime=0x1d5e55c, ftLastAccessTime.dwLowDateTime=0xeb1a0170, ftLastAccessTime.dwHighDateTime=0x1d5e6ca, ftLastWriteTime.dwLowDateTime=0x939de30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe400)) returned 1 [0153.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.110] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tPsMceWKAb.rtf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tpsmcewkab.rtf.symmyware")) returned 1 [0153.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", lpFilePart=0x0) returned 0x35 [0153.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.112] GetFileType (hFile=0x344) returned 0x1 [0153.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.112] GetFileType (hFile=0x344) returned 0x1 [0153.112] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x124ab [0153.112] ReadFile (in: hFile=0x344, lpBuffer=0x270aea0, nNumberOfBytesToRead=0x124ab, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x270aea0*, lpNumberOfBytesRead=0x12dd38*=0x124ab, lpOverlapped=0x0) returned 1 [0153.114] CloseHandle (hObject=0x344) returned 1 [0153.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", lpFilePart=0x0) returned 0x35 [0153.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.147] GetFileType (hFile=0x344) returned 0x1 [0153.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.147] GetFileType (hFile=0x344) returned 0x1 [0153.147] WriteFile (in: hFile=0x344, lpBuffer=0x27a4848*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27a4848*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.148] CloseHandle (hObject=0x344) returned 1 [0153.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", lpFilePart=0x0) returned 0x35 [0153.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.150] GetFileType (hFile=0x344) returned 0x1 [0153.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.150] GetFileType (hFile=0x344) returned 0x1 [0153.150] WriteFile (in: hFile=0x344, lpBuffer=0x2790d38*, nNumberOfBytesToWrite=0x124b0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2790d38*, lpNumberOfBytesWritten=0x12dd98*=0x124b0, lpOverlapped=0x0) returned 1 [0153.159] CloseHandle (hObject=0x344) returned 1 [0153.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt", lpFilePart=0x0) returned 0x35 [0153.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt.SYMMYWARE", lpFilePart=0x0) returned 0x3f [0153.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cebd710, ftCreationTime.dwHighDateTime=0x1d5e80a, ftLastAccessTime.dwLowDateTime=0x6e46d10, ftLastAccessTime.dwHighDateTime=0x1d5e724, ftLastWriteTime.dwLowDateTime=0x9417f50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x124b0)) returned 1 [0153.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tskUj8UpB.ppt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tskuj8upb.ppt.symmyware")) returned 1 [0153.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", lpFilePart=0x0) returned 0x3e [0153.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.162] GetFileType (hFile=0x344) returned 0x1 [0153.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.162] GetFileType (hFile=0x344) returned 0x1 [0153.162] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xd4f [0153.162] ReadFile (in: hFile=0x344, lpBuffer=0x27a6a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27a6a58*, lpNumberOfBytesRead=0x12dd38*=0xd4f, lpOverlapped=0x0) returned 1 [0153.163] CloseHandle (hObject=0x344) returned 1 [0153.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", lpFilePart=0x0) returned 0x3e [0153.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.182] GetFileType (hFile=0x344) returned 0x1 [0153.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.182] GetFileType (hFile=0x344) returned 0x1 [0153.182] WriteFile (in: hFile=0x344, lpBuffer=0x27fc200*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27fc200*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.184] CloseHandle (hObject=0x344) returned 1 [0153.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", lpFilePart=0x0) returned 0x3e [0153.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.186] GetFileType (hFile=0x344) returned 0x1 [0153.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.186] GetFileType (hFile=0x344) returned 0x1 [0153.186] WriteFile (in: hFile=0x344, lpBuffer=0x27fd380*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x27fd380*, lpNumberOfBytesWritten=0x12dc48*=0xd50, lpOverlapped=0x0) returned 1 [0153.187] CloseHandle (hObject=0x344) returned 1 [0153.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx", lpFilePart=0x0) returned 0x3e [0153.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx.SYMMYWARE", lpFilePart=0x0) returned 0x48 [0153.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e202d0, ftCreationTime.dwHighDateTime=0x1d5d73d, ftLastAccessTime.dwLowDateTime=0x7dac980, ftLastAccessTime.dwHighDateTime=0x1d5d595, ftLastWriteTime.dwLowDateTime=0x9459e00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0153.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.188] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Uaw2JpqzILQ7kxD-M.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\uaw2jpqzilq7kxd-m.docx.symmyware")) returned 1 [0153.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", lpFilePart=0x0) returned 0x3f [0153.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.190] GetFileType (hFile=0x344) returned 0x1 [0153.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.190] GetFileType (hFile=0x344) returned 0x1 [0153.190] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1616 [0153.190] ReadFile (in: hFile=0x344, lpBuffer=0x27fe720, nNumberOfBytesToRead=0x1616, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27fe720*, lpNumberOfBytesRead=0x12dd38*=0x1616, lpOverlapped=0x0) returned 1 [0153.191] CloseHandle (hObject=0x344) returned 1 [0153.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", lpFilePart=0x0) returned 0x3f [0153.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.203] GetFileType (hFile=0x344) returned 0x1 [0153.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.204] GetFileType (hFile=0x344) returned 0x1 [0153.204] WriteFile (in: hFile=0x344, lpBuffer=0x28570f8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28570f8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.205] CloseHandle (hObject=0x344) returned 1 [0153.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", lpFilePart=0x0) returned 0x3f [0153.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.207] GetFileType (hFile=0x344) returned 0x1 [0153.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.207] GetFileType (hFile=0x344) returned 0x1 [0153.208] WriteFile (in: hFile=0x344, lpBuffer=0x2854458*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2854458*, lpNumberOfBytesWritten=0x12dd98*=0x1620, lpOverlapped=0x0) returned 1 [0153.209] CloseHandle (hObject=0x344) returned 1 [0153.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx", lpFilePart=0x0) returned 0x3f [0153.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x49 [0153.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f3d070, ftCreationTime.dwHighDateTime=0x1d5cad7, ftLastAccessTime.dwLowDateTime=0x63f86cb0, ftLastAccessTime.dwHighDateTime=0x1d581b0, ftLastWriteTime.dwLowDateTime=0x948d250, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1620)) returned 1 [0153.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.210] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\VA3P6brku4aeXt BJe.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\va3p6brku4aext bje.pptx.symmyware")) returned 1 [0153.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", lpFilePart=0x0) returned 0x41 [0153.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.212] GetFileType (hFile=0x344) returned 0x1 [0153.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.212] GetFileType (hFile=0x344) returned 0x1 [0153.212] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x9e05 [0153.212] ReadFile (in: hFile=0x344, lpBuffer=0x2858610, nNumberOfBytesToRead=0x9e05, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2858610*, lpNumberOfBytesRead=0x12dd38*=0x9e05, lpOverlapped=0x0) returned 1 [0153.213] CloseHandle (hObject=0x344) returned 1 [0153.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", lpFilePart=0x0) returned 0x41 [0153.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.260] GetFileType (hFile=0x344) returned 0x1 [0153.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.260] GetFileType (hFile=0x344) returned 0x1 [0153.260] WriteFile (in: hFile=0x344, lpBuffer=0x26fc8d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26fc8d0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.262] CloseHandle (hObject=0x344) returned 1 [0153.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", lpFilePart=0x0) returned 0x41 [0153.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.264] GetFileType (hFile=0x344) returned 0x1 [0153.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.264] GetFileType (hFile=0x344) returned 0x1 [0153.264] WriteFile (in: hFile=0x344, lpBuffer=0x26f1430*, nNumberOfBytesToWrite=0x9e10, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26f1430*, lpNumberOfBytesWritten=0x12dd98*=0x9e10, lpOverlapped=0x0) returned 1 [0153.266] CloseHandle (hObject=0x344) returned 1 [0153.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx", lpFilePart=0x0) returned 0x41 [0153.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0153.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4c5a50, ftCreationTime.dwHighDateTime=0x1d5e1de, ftLastAccessTime.dwLowDateTime=0xa6b3d860, ftLastAccessTime.dwHighDateTime=0x1d5e703, ftLastWriteTime.dwLowDateTime=0x95184e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9e10)) returned 1 [0153.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.267] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XmQ-v6b7KWSfxJmcPHJt.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xmq-v6b7kwsfxjmcphjt.pptx.symmyware")) returned 1 [0153.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", lpFilePart=0x0) returned 0x33 [0153.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.269] GetFileType (hFile=0x344) returned 0x1 [0153.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.269] GetFileType (hFile=0x344) returned 0x1 [0153.269] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x18e4 [0153.269] ReadFile (in: hFile=0x344, lpBuffer=0x26fddc0, nNumberOfBytesToRead=0x18e4, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26fddc0*, lpNumberOfBytesRead=0x12dd38*=0x18e4, lpOverlapped=0x0) returned 1 [0153.271] CloseHandle (hObject=0x344) returned 1 [0153.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", lpFilePart=0x0) returned 0x33 [0153.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0153.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.334] GetFileType (hFile=0x344) returned 0x1 [0153.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0153.334] GetFileType (hFile=0x344) returned 0x1 [0153.334] WriteFile (in: hFile=0x344, lpBuffer=0x2757a30*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2757a30*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0153.335] CloseHandle (hObject=0x344) returned 1 [0153.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", lpFilePart=0x0) returned 0x33 [0153.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.337] GetFileType (hFile=0x344) returned 0x1 [0153.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0153.337] GetFileType (hFile=0x344) returned 0x1 [0153.337] WriteFile (in: hFile=0x344, lpBuffer=0x2754af0*, nNumberOfBytesToWrite=0x18f0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2754af0*, lpNumberOfBytesWritten=0x12dd98*=0x18f0, lpOverlapped=0x0) returned 1 [0153.338] CloseHandle (hObject=0x344) returned 1 [0153.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx", lpFilePart=0x0) returned 0x33 [0153.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x3d [0153.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92213e50, ftCreationTime.dwHighDateTime=0x1d597b3, ftLastAccessTime.dwLowDateTime=0x4f79fd20, ftLastAccessTime.dwHighDateTime=0x1d590b6, ftLastWriteTime.dwLowDateTime=0x95c3340, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x18f0)) returned 1 [0153.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0153.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_ew5FA.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_ew5fa.xlsx.symmyware")) returned 1 [0153.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o", lpFilePart=0x0) returned 0x35 [0153.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\", lpFilePart=0x0) returned 0x36 [0153.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0153.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e09ffa0, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x95af5b60, ftLastAccessTime.dwHighDateTime=0x1d5e123, ftLastWriteTime.dwLowDateTime=0x95af5b60, ftLastWriteTime.dwHighDateTime=0x1d5e123, nFileSizeHigh=0x0, nFileSizeLow=0x6743, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Zm3OE59zjS.ods", cAlternateFileName="0ZM3OE~1.ODS")) returned 1 [0153.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc940, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x29b54a30, ftLastAccessTime.dwHighDateTime=0x1d5d9e6, ftLastWriteTime.dwLowDateTime=0x29b54a30, ftLastWriteTime.dwHighDateTime=0x1d5d9e6, nFileSizeHigh=0x0, nFileSizeLow=0x8af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7oeJYQ.doc", cAlternateFileName="")) returned 1 [0153.358] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1ffc20, ftCreationTime.dwHighDateTime=0x1d5e4b0, ftLastAccessTime.dwLowDateTime=0x436e7070, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x436e7070, ftLastWriteTime.dwHighDateTime=0x1d5db9c, nFileSizeHigh=0x0, nFileSizeLow=0x1d15, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0WBfdn.ods", cAlternateFileName="")) returned 1 [0153.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987fb690, ftCreationTime.dwHighDateTime=0x1d5dd4b, ftLastAccessTime.dwLowDateTime=0x5357bfc0, ftLastAccessTime.dwHighDateTime=0x1d5dd66, ftLastWriteTime.dwLowDateTime=0x5357bfc0, ftLastWriteTime.dwHighDateTime=0x1d5dd66, nFileSizeHigh=0x0, nFileSizeLow=0x14f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gu0LF0o.ots", cAlternateFileName="")) returned 1 [0153.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2827fc20, ftCreationTime.dwHighDateTime=0x1d5d875, ftLastAccessTime.dwLowDateTime=0x3b56d4e0, ftLastAccessTime.dwHighDateTime=0x1d5dfa2, ftLastWriteTime.dwLowDateTime=0x3b56d4e0, ftLastWriteTime.dwHighDateTime=0x1d5dfa2, nFileSizeHigh=0x0, nFileSizeLow=0x1490d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgx5.pdf", cAlternateFileName="")) returned 1 [0153.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2febf0, ftCreationTime.dwHighDateTime=0x1d5db8a, ftLastAccessTime.dwLowDateTime=0xdefdcca0, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0xdefdcca0, ftLastWriteTime.dwHighDateTime=0x1d5db71, nFileSizeHigh=0x0, nFileSizeLow=0x1517f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LgFBuTI.xls", cAlternateFileName="")) returned 1 [0153.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa66b0740, ftCreationTime.dwHighDateTime=0x1d5defa, ftLastAccessTime.dwLowDateTime=0xbbf834d0, ftLastAccessTime.dwHighDateTime=0x1d5def4, ftLastWriteTime.dwLowDateTime=0xbbf834d0, ftLastWriteTime.dwHighDateTime=0x1d5def4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWW1r EsAvxM8xx.xls", cAlternateFileName="MWW1RE~1.XLS")) returned 1 [0153.359] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n2C5HGD-qSghQL5aC", cAlternateFileName="N2C5HG~1")) returned 1 [0153.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55b5af0, ftCreationTime.dwHighDateTime=0x1d5d99b, ftLastAccessTime.dwLowDateTime=0x2c633a00, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0x2c633a00, ftLastWriteTime.dwHighDateTime=0x1d5dad4, nFileSizeHigh=0x0, nFileSizeLow=0xa725, dwReserved0=0x0, dwReserved1=0x0, cFileName="NC_Yylp5Vjjp4CiFEz.odt", cAlternateFileName="NC_YYL~1.ODT")) returned 1 [0153.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e32450, ftCreationTime.dwHighDateTime=0x1d5dc3b, ftLastAccessTime.dwLowDateTime=0xc205b4a0, ftLastAccessTime.dwHighDateTime=0x1d5d8e2, ftLastWriteTime.dwLowDateTime=0xc205b4a0, ftLastWriteTime.dwHighDateTime=0x1d5d8e2, nFileSizeHigh=0x0, nFileSizeLow=0xb9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="rk0tqdaF.pptx", cAlternateFileName="RK0TQD~1.PPT")) returned 1 [0153.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951e2c90, ftCreationTime.dwHighDateTime=0x1d5df2e, ftLastAccessTime.dwLowDateTime=0x7bf07c50, ftLastAccessTime.dwHighDateTime=0x1d5df0b, ftLastWriteTime.dwLowDateTime=0x7bf07c50, ftLastWriteTime.dwHighDateTime=0x1d5df0b, nFileSizeHigh=0x0, nFileSizeLow=0x9656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZUQA_w2Lx.odp", cAlternateFileName="ZUQA_W~1.ODP")) returned 1 [0153.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.360] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0153.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0153.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0153.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0153.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o", lpFilePart=0x0) returned 0x35 [0153.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\", lpFilePart=0x0) returned 0x36 [0153.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0153.361] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d79ec0, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xb7a6ece0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0xb7a6ece0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e09ffa0, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x95af5b60, ftLastAccessTime.dwHighDateTime=0x1d5e123, ftLastWriteTime.dwLowDateTime=0x95af5b60, ftLastWriteTime.dwHighDateTime=0x1d5e123, nFileSizeHigh=0x0, nFileSizeLow=0x6743, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Zm3OE59zjS.ods", cAlternateFileName="0ZM3OE~1.ODS")) returned 1 [0153.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc940, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x29b54a30, ftLastAccessTime.dwHighDateTime=0x1d5d9e6, ftLastWriteTime.dwLowDateTime=0x29b54a30, ftLastWriteTime.dwHighDateTime=0x1d5d9e6, nFileSizeHigh=0x0, nFileSizeLow=0x8af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7oeJYQ.doc", cAlternateFileName="")) returned 1 [0153.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1ffc20, ftCreationTime.dwHighDateTime=0x1d5e4b0, ftLastAccessTime.dwLowDateTime=0x436e7070, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x436e7070, ftLastWriteTime.dwHighDateTime=0x1d5db9c, nFileSizeHigh=0x0, nFileSizeLow=0x1d15, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0WBfdn.ods", cAlternateFileName="")) returned 1 [0153.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987fb690, ftCreationTime.dwHighDateTime=0x1d5dd4b, ftLastAccessTime.dwLowDateTime=0x5357bfc0, ftLastAccessTime.dwHighDateTime=0x1d5dd66, ftLastWriteTime.dwLowDateTime=0x5357bfc0, ftLastWriteTime.dwHighDateTime=0x1d5dd66, nFileSizeHigh=0x0, nFileSizeLow=0x14f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gu0LF0o.ots", cAlternateFileName="")) returned 1 [0153.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2827fc20, ftCreationTime.dwHighDateTime=0x1d5d875, ftLastAccessTime.dwLowDateTime=0x3b56d4e0, ftLastAccessTime.dwHighDateTime=0x1d5dfa2, ftLastWriteTime.dwLowDateTime=0x3b56d4e0, ftLastWriteTime.dwHighDateTime=0x1d5dfa2, nFileSizeHigh=0x0, nFileSizeLow=0x1490d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgx5.pdf", cAlternateFileName="")) returned 1 [0153.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2febf0, ftCreationTime.dwHighDateTime=0x1d5db8a, ftLastAccessTime.dwLowDateTime=0xdefdcca0, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0xdefdcca0, ftLastWriteTime.dwHighDateTime=0x1d5db71, nFileSizeHigh=0x0, nFileSizeLow=0x1517f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LgFBuTI.xls", cAlternateFileName="")) returned 1 [0153.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa66b0740, ftCreationTime.dwHighDateTime=0x1d5defa, ftLastAccessTime.dwLowDateTime=0xbbf834d0, ftLastAccessTime.dwHighDateTime=0x1d5def4, ftLastWriteTime.dwLowDateTime=0xbbf834d0, ftLastWriteTime.dwHighDateTime=0x1d5def4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWW1r EsAvxM8xx.xls", cAlternateFileName="MWW1RE~1.XLS")) returned 1 [0153.363] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n2C5HGD-qSghQL5aC", cAlternateFileName="N2C5HG~1")) returned 1 [0153.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55b5af0, ftCreationTime.dwHighDateTime=0x1d5d99b, ftLastAccessTime.dwLowDateTime=0x2c633a00, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0x2c633a00, ftLastWriteTime.dwHighDateTime=0x1d5dad4, nFileSizeHigh=0x0, nFileSizeLow=0xa725, dwReserved0=0x0, dwReserved1=0x0, cFileName="NC_Yylp5Vjjp4CiFEz.odt", cAlternateFileName="NC_YYL~1.ODT")) returned 1 [0153.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e32450, ftCreationTime.dwHighDateTime=0x1d5dc3b, ftLastAccessTime.dwLowDateTime=0xc205b4a0, ftLastAccessTime.dwHighDateTime=0x1d5d8e2, ftLastWriteTime.dwLowDateTime=0xc205b4a0, ftLastWriteTime.dwHighDateTime=0x1d5d8e2, nFileSizeHigh=0x0, nFileSizeLow=0xb9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="rk0tqdaF.pptx", cAlternateFileName="RK0TQD~1.PPT")) returned 1 [0153.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951e2c90, ftCreationTime.dwHighDateTime=0x1d5df2e, ftLastAccessTime.dwLowDateTime=0x7bf07c50, ftLastAccessTime.dwHighDateTime=0x1d5df0b, ftLastWriteTime.dwLowDateTime=0x7bf07c50, ftLastWriteTime.dwHighDateTime=0x1d5df0b, nFileSizeHigh=0x0, nFileSizeLow=0x9656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZUQA_w2Lx.odp", cAlternateFileName="ZUQA_W~1.ODP")) returned 1 [0153.364] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951e2c90, ftCreationTime.dwHighDateTime=0x1d5df2e, ftLastAccessTime.dwLowDateTime=0x7bf07c50, ftLastAccessTime.dwHighDateTime=0x1d5df0b, ftLastWriteTime.dwLowDateTime=0x7bf07c50, ftLastWriteTime.dwHighDateTime=0x1d5df0b, nFileSizeHigh=0x0, nFileSizeLow=0x9656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZUQA_w2Lx.odp", cAlternateFileName="ZUQA_W~1.ODP")) returned 0 [0153.365] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0153.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0153.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0153.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", lpFilePart=0x0) returned 0x45 [0153.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.365] GetFileType (hFile=0x344) returned 0x1 [0153.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.366] GetFileType (hFile=0x344) returned 0x1 [0153.366] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x6743 [0153.366] ReadFile (in: hFile=0x344, lpBuffer=0x275d8a8, nNumberOfBytesToRead=0x6743, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x275d8a8*, lpNumberOfBytesRead=0x12dcb8*=0x6743, lpOverlapped=0x0) returned 1 [0153.367] CloseHandle (hObject=0x344) returned 1 [0153.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", lpFilePart=0x0) returned 0x45 [0153.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.439] GetFileType (hFile=0x344) returned 0x1 [0153.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.439] GetFileType (hFile=0x344) returned 0x1 [0153.439] WriteFile (in: hFile=0x344, lpBuffer=0x27d49a0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27d49a0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.440] CloseHandle (hObject=0x344) returned 1 [0153.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", lpFilePart=0x0) returned 0x45 [0153.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.442] GetFileType (hFile=0x344) returned 0x1 [0153.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.442] GetFileType (hFile=0x344) returned 0x1 [0153.442] WriteFile (in: hFile=0x344, lpBuffer=0x27ccbd0*, nNumberOfBytesToWrite=0x6750, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27ccbd0*, lpNumberOfBytesWritten=0x12dd18*=0x6750, lpOverlapped=0x0) returned 1 [0153.444] CloseHandle (hObject=0x344) returned 1 [0153.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods", lpFilePart=0x0) returned 0x45 [0153.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods.SYMMYWARE", lpFilePart=0x0) returned 0x4f [0153.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e09ffa0, ftCreationTime.dwHighDateTime=0x1d5e2b1, ftLastAccessTime.dwLowDateTime=0x95af5b60, ftLastAccessTime.dwHighDateTime=0x1d5e123, ftLastWriteTime.dwLowDateTime=0x96b2760, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6750)) returned 1 [0153.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\0Zm3OE59zjS.ods.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\0zm3oe59zjs.ods.symmyware")) returned 1 [0153.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", lpFilePart=0x0) returned 0x40 [0153.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.446] GetFileType (hFile=0x344) returned 0x1 [0153.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.446] GetFileType (hFile=0x344) returned 0x1 [0153.446] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x8af2 [0153.446] ReadFile (in: hFile=0x344, lpBuffer=0x27d5eb8, nNumberOfBytesToRead=0x8af2, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27d5eb8*, lpNumberOfBytesRead=0x12dcb8*=0x8af2, lpOverlapped=0x0) returned 1 [0153.447] CloseHandle (hObject=0x344) returned 1 [0153.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", lpFilePart=0x0) returned 0x40 [0153.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.460] GetFileType (hFile=0x344) returned 0x1 [0153.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.460] GetFileType (hFile=0x344) returned 0x1 [0153.460] WriteFile (in: hFile=0x344, lpBuffer=0x285a5c0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x285a5c0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.462] CloseHandle (hObject=0x344) returned 1 [0153.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", lpFilePart=0x0) returned 0x40 [0153.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.463] GetFileType (hFile=0x344) returned 0x1 [0153.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.463] GetFileType (hFile=0x344) returned 0x1 [0153.463] WriteFile (in: hFile=0x344, lpBuffer=0x2850450*, nNumberOfBytesToWrite=0x8b00, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2850450*, lpNumberOfBytesWritten=0x12dd18*=0x8b00, lpOverlapped=0x0) returned 1 [0153.465] CloseHandle (hObject=0x344) returned 1 [0153.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc", lpFilePart=0x0) returned 0x40 [0153.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0153.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc940, ftCreationTime.dwHighDateTime=0x1d5e4be, ftLastAccessTime.dwLowDateTime=0x29b54a30, ftLastAccessTime.dwHighDateTime=0x1d5d9e6, ftLastWriteTime.dwLowDateTime=0x96e5bb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8b00)) returned 1 [0153.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.466] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\7oeJYQ.doc.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\7oejyq.doc.symmyware")) returned 1 [0153.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", lpFilePart=0x0) returned 0x41 [0153.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.467] GetFileType (hFile=0x344) returned 0x1 [0153.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.467] GetFileType (hFile=0x344) returned 0x1 [0153.467] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1d15 [0153.468] ReadFile (in: hFile=0x344, lpBuffer=0x285bab0, nNumberOfBytesToRead=0x1d15, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x285bab0*, lpNumberOfBytesRead=0x12dcb8*=0x1d15, lpOverlapped=0x0) returned 1 [0153.469] CloseHandle (hObject=0x344) returned 1 [0153.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", lpFilePart=0x0) returned 0x41 [0153.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.483] GetFileType (hFile=0x344) returned 0x1 [0153.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.483] GetFileType (hFile=0x344) returned 0x1 [0153.483] WriteFile (in: hFile=0x344, lpBuffer=0x28b6e78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28b6e78*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.484] CloseHandle (hObject=0x344) returned 1 [0153.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", lpFilePart=0x0) returned 0x41 [0153.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.485] GetFileType (hFile=0x344) returned 0x1 [0153.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.486] GetFileType (hFile=0x344) returned 0x1 [0153.486] WriteFile (in: hFile=0x344, lpBuffer=0x28b3ae8*, nNumberOfBytesToWrite=0x1d20, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28b3ae8*, lpNumberOfBytesWritten=0x12dd18*=0x1d20, lpOverlapped=0x0) returned 1 [0153.487] CloseHandle (hObject=0x344) returned 1 [0153.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods", lpFilePart=0x0) returned 0x41 [0153.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0153.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1ffc20, ftCreationTime.dwHighDateTime=0x1d5e4b0, ftLastAccessTime.dwLowDateTime=0x436e7070, ftLastAccessTime.dwHighDateTime=0x1d5db9c, ftLastWriteTime.dwLowDateTime=0x97141e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1d20)) returned 1 [0153.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\E0WBfdn.ods.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\e0wbfdn.ods.symmyware")) returned 1 [0153.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", lpFilePart=0x0) returned 0x3e [0153.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.490] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1490d [0153.490] ReadFile (in: hFile=0x344, lpBuffer=0x28b8388, nNumberOfBytesToRead=0x1490d, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28b8388*, lpNumberOfBytesRead=0x12dcb8*=0x1490d, lpOverlapped=0x0) returned 1 [0153.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", lpFilePart=0x0) returned 0x3e [0153.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.573] GetFileType (hFile=0x344) returned 0x1 [0153.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.573] GetFileType (hFile=0x344) returned 0x1 [0153.573] WriteFile (in: hFile=0x344, lpBuffer=0x2765ab0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2765ab0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.575] CloseHandle (hObject=0x344) returned 1 [0153.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", lpFilePart=0x0) returned 0x3e [0153.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.585] GetFileType (hFile=0x344) returned 0x1 [0153.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.586] GetFileType (hFile=0x344) returned 0x1 [0153.586] WriteFile (in: hFile=0x344, lpBuffer=0x274fb38*, nNumberOfBytesToWrite=0x14910, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x274fb38*, lpNumberOfBytesWritten=0x12dd18*=0x14910, lpOverlapped=0x0) returned 1 [0153.589] CloseHandle (hObject=0x344) returned 1 [0153.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf", lpFilePart=0x0) returned 0x3e [0153.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf.SYMMYWARE", lpFilePart=0x0) returned 0x48 [0153.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2827fc20, ftCreationTime.dwHighDateTime=0x1d5d875, ftLastAccessTime.dwLowDateTime=0x3b56d4e0, ftLastAccessTime.dwHighDateTime=0x1d5dfa2, ftLastWriteTime.dwLowDateTime=0x97f99c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14910)) returned 1 [0153.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.589] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\hgx5.pdf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\hgx5.pdf.symmyware")) returned 1 [0153.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", lpFilePart=0x0) returned 0x41 [0153.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.590] GetFileType (hFile=0x344) returned 0x1 [0153.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.591] GetFileType (hFile=0x344) returned 0x1 [0153.591] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1517f [0153.591] ReadFile (in: hFile=0x344, lpBuffer=0x12786418, nNumberOfBytesToRead=0x1517f, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12786418*, lpNumberOfBytesRead=0x12dcb8*=0x1517f, lpOverlapped=0x0) returned 1 [0153.592] CloseHandle (hObject=0x344) returned 1 [0153.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", lpFilePart=0x0) returned 0x41 [0153.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.608] GetFileType (hFile=0x344) returned 0x1 [0153.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.608] GetFileType (hFile=0x344) returned 0x1 [0153.608] WriteFile (in: hFile=0x344, lpBuffer=0x27b7648*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27b7648*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.609] CloseHandle (hObject=0x344) returned 1 [0153.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", lpFilePart=0x0) returned 0x41 [0153.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.610] GetFileType (hFile=0x344) returned 0x1 [0153.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.610] GetFileType (hFile=0x344) returned 0x1 [0153.611] WriteFile (in: hFile=0x344, lpBuffer=0x127efc38*, nNumberOfBytesToWrite=0x15180, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x127efc38*, lpNumberOfBytesWritten=0x12dd18*=0x15180, lpOverlapped=0x0) returned 1 [0153.613] CloseHandle (hObject=0x344) returned 1 [0153.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls", lpFilePart=0x0) returned 0x41 [0153.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0153.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2febf0, ftCreationTime.dwHighDateTime=0x1d5db8a, ftLastAccessTime.dwLowDateTime=0xdefdcca0, ftLastAccessTime.dwHighDateTime=0x1d5db71, ftLastWriteTime.dwLowDateTime=0x9836a50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15180)) returned 1 [0153.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.614] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\LgFBuTI.xls.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\lgfbuti.xls.symmyware")) returned 1 [0153.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", lpFilePart=0x0) returned 0x49 [0153.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.615] GetFileType (hFile=0x344) returned 0x1 [0153.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.615] GetFileType (hFile=0x344) returned 0x1 [0153.615] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xd4d [0153.615] ReadFile (in: hFile=0x344, lpBuffer=0x27b98c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27b98c0*, lpNumberOfBytesRead=0x12dcb8*=0xd4d, lpOverlapped=0x0) returned 1 [0153.616] CloseHandle (hObject=0x344) returned 1 [0153.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", lpFilePart=0x0) returned 0x49 [0153.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.627] GetFileType (hFile=0x344) returned 0x1 [0153.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.627] GetFileType (hFile=0x344) returned 0x1 [0153.627] WriteFile (in: hFile=0x344, lpBuffer=0x280f078*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x280f078*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.628] CloseHandle (hObject=0x344) returned 1 [0153.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", lpFilePart=0x0) returned 0x49 [0153.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.629] GetFileType (hFile=0x344) returned 0x1 [0153.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.629] GetFileType (hFile=0x344) returned 0x1 [0153.629] WriteFile (in: hFile=0x344, lpBuffer=0x2810208*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x12dbc8, lpOverlapped=0x0 | out: lpBuffer=0x2810208*, lpNumberOfBytesWritten=0x12dbc8*=0xd50, lpOverlapped=0x0) returned 1 [0153.630] CloseHandle (hObject=0x344) returned 1 [0153.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls", lpFilePart=0x0) returned 0x49 [0153.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls.SYMMYWARE", lpFilePart=0x0) returned 0x53 [0153.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa66b0740, ftCreationTime.dwHighDateTime=0x1d5defa, ftLastAccessTime.dwLowDateTime=0xbbf834d0, ftLastAccessTime.dwHighDateTime=0x1d5def4, ftLastWriteTime.dwLowDateTime=0x9860260, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0153.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.633] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\mWW1r EsAvxM8xx.xls.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\mww1r esavxm8xx.xls.symmyware")) returned 1 [0153.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", lpFilePart=0x0) returned 0x4c [0153.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.634] GetFileType (hFile=0x344) returned 0x1 [0153.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.634] GetFileType (hFile=0x344) returned 0x1 [0153.635] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xa725 [0153.635] ReadFile (in: hFile=0x344, lpBuffer=0x2811600, nNumberOfBytesToRead=0xa725, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2811600*, lpNumberOfBytesRead=0x12dcb8*=0xa725, lpOverlapped=0x0) returned 1 [0153.636] CloseHandle (hObject=0x344) returned 1 [0153.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", lpFilePart=0x0) returned 0x4c [0153.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.646] GetFileType (hFile=0x344) returned 0x1 [0153.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.646] GetFileType (hFile=0x344) returned 0x1 [0153.646] WriteFile (in: hFile=0x344, lpBuffer=0x288b800*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x288b800*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.647] CloseHandle (hObject=0x344) returned 1 [0153.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", lpFilePart=0x0) returned 0x4c [0153.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.648] GetFileType (hFile=0x344) returned 0x1 [0153.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.648] GetFileType (hFile=0x344) returned 0x1 [0153.648] WriteFile (in: hFile=0x344, lpBuffer=0x287fa30*, nNumberOfBytesToWrite=0xa730, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x287fa30*, lpNumberOfBytesWritten=0x12dd18*=0xa730, lpOverlapped=0x0) returned 1 [0153.650] CloseHandle (hObject=0x344) returned 1 [0153.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt", lpFilePart=0x0) returned 0x4c [0153.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0153.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55b5af0, ftCreationTime.dwHighDateTime=0x1d5d99b, ftLastAccessTime.dwLowDateTime=0x2c633a00, ftLastAccessTime.dwHighDateTime=0x1d5dad4, ftLastWriteTime.dwLowDateTime=0x988c180, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa730)) returned 1 [0153.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.651] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\NC_Yylp5Vjjp4CiFEz.odt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\nc_yylp5vjjp4cifez.odt.symmyware")) returned 1 [0153.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", lpFilePart=0x0) returned 0x43 [0153.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.652] GetFileType (hFile=0x344) returned 0x1 [0153.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.664] GetFileType (hFile=0x344) returned 0x1 [0153.664] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xb9eb [0153.664] ReadFile (in: hFile=0x344, lpBuffer=0x288cd70, nNumberOfBytesToRead=0xb9eb, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x288cd70*, lpNumberOfBytesRead=0x12dcb8*=0xb9eb, lpOverlapped=0x0) returned 1 [0153.665] CloseHandle (hObject=0x344) returned 1 [0153.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", lpFilePart=0x0) returned 0x43 [0153.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.677] GetFileType (hFile=0x344) returned 0x1 [0153.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.677] GetFileType (hFile=0x344) returned 0x1 [0153.685] WriteFile (in: hFile=0x344, lpBuffer=0x26ff408*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x26ff408*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.686] CloseHandle (hObject=0x344) returned 1 [0153.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", lpFilePart=0x0) returned 0x43 [0153.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.688] GetFileType (hFile=0x344) returned 0x1 [0153.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.688] GetFileType (hFile=0x344) returned 0x1 [0153.688] WriteFile (in: hFile=0x344, lpBuffer=0x26f2460*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x26f2460*, lpNumberOfBytesWritten=0x12dd18*=0xb9f0, lpOverlapped=0x0) returned 1 [0153.689] CloseHandle (hObject=0x344) returned 1 [0153.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx", lpFilePart=0x0) returned 0x43 [0153.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0153.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e32450, ftCreationTime.dwHighDateTime=0x1d5dc3b, ftLastAccessTime.dwLowDateTime=0xc205b4a0, ftLastAccessTime.dwHighDateTime=0x1d5d8e2, ftLastWriteTime.dwLowDateTime=0x98edc00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xb9f0)) returned 1 [0153.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.690] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\rk0tqdaF.pptx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\rk0tqdaf.pptx.symmyware")) returned 1 [0153.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", lpFilePart=0x0) returned 0x43 [0153.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.691] GetFileType (hFile=0x344) returned 0x1 [0153.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.691] GetFileType (hFile=0x344) returned 0x1 [0153.691] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x9656 [0153.691] ReadFile (in: hFile=0x344, lpBuffer=0x2700918, nNumberOfBytesToRead=0x9656, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2700918*, lpNumberOfBytesRead=0x12dcb8*=0x9656, lpOverlapped=0x0) returned 1 [0153.693] CloseHandle (hObject=0x344) returned 1 [0153.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", lpFilePart=0x0) returned 0x43 [0153.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0153.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.766] GetFileType (hFile=0x344) returned 0x1 [0153.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0153.791] GetFileType (hFile=0x344) returned 0x1 [0153.792] WriteFile (in: hFile=0x344, lpBuffer=0x2789650*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2789650*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0153.792] CloseHandle (hObject=0x344) returned 1 [0153.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", lpFilePart=0x0) returned 0x43 [0153.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0153.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.794] GetFileType (hFile=0x344) returned 0x1 [0153.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0153.794] GetFileType (hFile=0x344) returned 0x1 [0153.794] WriteFile (in: hFile=0x344, lpBuffer=0x277e978*, nNumberOfBytesToWrite=0x9660, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x277e978*, lpNumberOfBytesWritten=0x12dd18*=0x9660, lpOverlapped=0x0) returned 1 [0153.795] CloseHandle (hObject=0x344) returned 1 [0153.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp", lpFilePart=0x0) returned 0x43 [0153.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0153.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951e2c90, ftCreationTime.dwHighDateTime=0x1d5df2e, ftLastAccessTime.dwLowDateTime=0x7bf07c50, ftLastAccessTime.dwHighDateTime=0x1d5df0b, ftLastWriteTime.dwLowDateTime=0x99b3810, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9660)) returned 1 [0153.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0153.796] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\ZUQA_w2Lx.odp.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\zuqa_w2lx.odp.symmyware")) returned 1 [0153.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC", lpFilePart=0x0) returned 0x47 [0153.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\", lpFilePart=0x0) returned 0x48 [0153.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0153.797] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf61570, ftCreationTime.dwHighDateTime=0x1d5e7fa, ftLastAccessTime.dwLowDateTime=0x3916ce20, ftLastAccessTime.dwHighDateTime=0x1d5e730, ftLastWriteTime.dwLowDateTime=0x3916ce20, ftLastWriteTime.dwHighDateTime=0x1d5e730, nFileSizeHigh=0x0, nFileSizeLow=0x17794, dwReserved0=0x0, dwReserved1=0x0, cFileName="En09dA3vG.odp", cAlternateFileName="EN09DA~1.ODP")) returned 1 [0153.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabf7d870, ftCreationTime.dwHighDateTime=0x1d5dd95, ftLastAccessTime.dwLowDateTime=0x90291190, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x90291190, ftLastWriteTime.dwHighDateTime=0x1d5d80e, nFileSizeHigh=0x0, nFileSizeLow=0x279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9RDAT9dP6GD.docx", cAlternateFileName="G9RDAT~1.DOC")) returned 1 [0153.798] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4181120, ftCreationTime.dwHighDateTime=0x1d5db8c, ftLastAccessTime.dwLowDateTime=0x66e297d0, ftLastAccessTime.dwHighDateTime=0x1d5dd17, ftLastWriteTime.dwLowDateTime=0x66e297d0, ftLastWriteTime.dwHighDateTime=0x1d5dd17, nFileSizeHigh=0x0, nFileSizeLow=0xfaad, dwReserved0=0x0, dwReserved1=0x0, cFileName="hGXOM8c2noZhJcBR5BUN.docx", cAlternateFileName="HGXOM8~1.DOC")) returned 1 [0153.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e919570, ftCreationTime.dwHighDateTime=0x1d5dfe7, ftLastAccessTime.dwLowDateTime=0x8729a210, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x8729a210, ftLastWriteTime.dwHighDateTime=0x1d5d7b6, nFileSizeHigh=0x0, nFileSizeLow=0x11fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="l3H3.odp", cAlternateFileName="")) returned 1 [0153.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56976d0, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x14168dc0, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0x14168dc0, ftLastWriteTime.dwHighDateTime=0x1d5e4df, nFileSizeHigh=0x0, nFileSizeLow=0x6b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="rpCWBOC.xls", cAlternateFileName="")) returned 1 [0153.799] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b16770, ftCreationTime.dwHighDateTime=0x1d5e747, ftLastAccessTime.dwLowDateTime=0x82393a0, ftLastAccessTime.dwHighDateTime=0x1d5ddeb, ftLastWriteTime.dwLowDateTime=0x82393a0, ftLastWriteTime.dwHighDateTime=0x1d5ddeb, nFileSizeHigh=0x0, nFileSizeLow=0x43e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UZPiQS.ppt", cAlternateFileName="")) returned 1 [0153.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8b6a70, ftCreationTime.dwHighDateTime=0x1d5ddac, ftLastAccessTime.dwLowDateTime=0x964fca70, ftLastAccessTime.dwHighDateTime=0x1d5d96a, ftLastWriteTime.dwLowDateTime=0x964fca70, ftLastWriteTime.dwHighDateTime=0x1d5d96a, nFileSizeHigh=0x0, nFileSizeLow=0x1245a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxynWnB NV2 Ase2Y.odp", cAlternateFileName="VXYNWN~1.ODP")) returned 1 [0153.800] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.800] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0153.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0153.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0153.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0153.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC", lpFilePart=0x0) returned 0x47 [0153.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\", lpFilePart=0x0) returned 0x48 [0153.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0153.801] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d70dfd0, ftCreationTime.dwHighDateTime=0x1d5e75f, ftLastAccessTime.dwLowDateTime=0x7824aa50, ftLastAccessTime.dwHighDateTime=0x1d5e579, ftLastWriteTime.dwLowDateTime=0x7824aa50, ftLastWriteTime.dwHighDateTime=0x1d5e579, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.802] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf61570, ftCreationTime.dwHighDateTime=0x1d5e7fa, ftLastAccessTime.dwLowDateTime=0x3916ce20, ftLastAccessTime.dwHighDateTime=0x1d5e730, ftLastWriteTime.dwLowDateTime=0x3916ce20, ftLastWriteTime.dwHighDateTime=0x1d5e730, nFileSizeHigh=0x0, nFileSizeLow=0x17794, dwReserved0=0x0, dwReserved1=0x0, cFileName="En09dA3vG.odp", cAlternateFileName="EN09DA~1.ODP")) returned 1 [0153.802] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabf7d870, ftCreationTime.dwHighDateTime=0x1d5dd95, ftLastAccessTime.dwLowDateTime=0x90291190, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x90291190, ftLastWriteTime.dwHighDateTime=0x1d5d80e, nFileSizeHigh=0x0, nFileSizeLow=0x279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="G9RDAT9dP6GD.docx", cAlternateFileName="G9RDAT~1.DOC")) returned 1 [0153.802] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4181120, ftCreationTime.dwHighDateTime=0x1d5db8c, ftLastAccessTime.dwLowDateTime=0x66e297d0, ftLastAccessTime.dwHighDateTime=0x1d5dd17, ftLastWriteTime.dwLowDateTime=0x66e297d0, ftLastWriteTime.dwHighDateTime=0x1d5dd17, nFileSizeHigh=0x0, nFileSizeLow=0xfaad, dwReserved0=0x0, dwReserved1=0x0, cFileName="hGXOM8c2noZhJcBR5BUN.docx", cAlternateFileName="HGXOM8~1.DOC")) returned 1 [0153.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e919570, ftCreationTime.dwHighDateTime=0x1d5dfe7, ftLastAccessTime.dwLowDateTime=0x8729a210, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x8729a210, ftLastWriteTime.dwHighDateTime=0x1d5d7b6, nFileSizeHigh=0x0, nFileSizeLow=0x11fab, dwReserved0=0x0, dwReserved1=0x0, cFileName="l3H3.odp", cAlternateFileName="")) returned 1 [0153.803] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56976d0, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x14168dc0, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0x14168dc0, ftLastWriteTime.dwHighDateTime=0x1d5e4df, nFileSizeHigh=0x0, nFileSizeLow=0x6b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="rpCWBOC.xls", cAlternateFileName="")) returned 1 [0153.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b16770, ftCreationTime.dwHighDateTime=0x1d5e747, ftLastAccessTime.dwLowDateTime=0x82393a0, ftLastAccessTime.dwHighDateTime=0x1d5ddeb, ftLastWriteTime.dwLowDateTime=0x82393a0, ftLastWriteTime.dwHighDateTime=0x1d5ddeb, nFileSizeHigh=0x0, nFileSizeLow=0x43e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UZPiQS.ppt", cAlternateFileName="")) returned 1 [0153.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8b6a70, ftCreationTime.dwHighDateTime=0x1d5ddac, ftLastAccessTime.dwLowDateTime=0x964fca70, ftLastAccessTime.dwHighDateTime=0x1d5d96a, ftLastWriteTime.dwLowDateTime=0x964fca70, ftLastWriteTime.dwHighDateTime=0x1d5d96a, nFileSizeHigh=0x0, nFileSizeLow=0x1245a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxynWnB NV2 Ase2Y.odp", cAlternateFileName="VXYNWN~1.ODP")) returned 1 [0153.804] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8b6a70, ftCreationTime.dwHighDateTime=0x1d5ddac, ftLastAccessTime.dwLowDateTime=0x964fca70, ftLastAccessTime.dwHighDateTime=0x1d5d96a, ftLastWriteTime.dwLowDateTime=0x964fca70, ftLastWriteTime.dwHighDateTime=0x1d5d96a, nFileSizeHigh=0x0, nFileSizeLow=0x1245a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxynWnB NV2 Ase2Y.odp", cAlternateFileName="VXYNWN~1.ODP")) returned 0 [0153.805] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0153.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0153.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0153.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", lpFilePart=0x0) returned 0x55 [0153.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.805] GetFileType (hFile=0x344) returned 0x1 [0153.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.806] GetFileType (hFile=0x344) returned 0x1 [0153.806] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x17794 [0153.806] ReadFile (in: hFile=0x344, lpBuffer=0x12831060, nNumberOfBytesToRead=0x17794, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12831060*, lpNumberOfBytesRead=0x12dc38*=0x17794, lpOverlapped=0x0) returned 1 [0153.808] CloseHandle (hObject=0x344) returned 1 [0153.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", lpFilePart=0x0) returned 0x55 [0153.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0153.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.902] GetFileType (hFile=0x344) returned 0x1 [0153.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0153.902] GetFileType (hFile=0x344) returned 0x1 [0153.902] WriteFile (in: hFile=0x344, lpBuffer=0x27df298*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x27df298*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0153.906] CloseHandle (hObject=0x344) returned 1 [0153.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", lpFilePart=0x0) returned 0x55 [0153.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.908] GetFileType (hFile=0x344) returned 0x1 [0153.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.908] GetFileType (hFile=0x344) returned 0x1 [0153.908] WriteFile (in: hFile=0x344, lpBuffer=0x128a6718*, nNumberOfBytesToWrite=0x177a0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x128a6718*, lpNumberOfBytesWritten=0x12dc98*=0x177a0, lpOverlapped=0x0) returned 1 [0153.912] CloseHandle (hObject=0x344) returned 1 [0153.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp", lpFilePart=0x0) returned 0x55 [0153.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp.SYMMYWARE", lpFilePart=0x0) returned 0x5f [0153.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf61570, ftCreationTime.dwHighDateTime=0x1d5e7fa, ftLastAccessTime.dwLowDateTime=0x3916ce20, ftLastAccessTime.dwHighDateTime=0x1d5e730, ftLastWriteTime.dwLowDateTime=0x9a8f3b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x177a0)) returned 1 [0153.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0153.913] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\En09dA3vG.odp.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\en09da3vg.odp.symmyware")) returned 1 [0153.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", lpFilePart=0x0) returned 0x59 [0153.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.915] GetFileType (hFile=0x344) returned 0x1 [0153.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.915] GetFileType (hFile=0x344) returned 0x1 [0153.915] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x279e [0153.915] ReadFile (in: hFile=0x344, lpBuffer=0x27e0870, nNumberOfBytesToRead=0x279e, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27e0870*, lpNumberOfBytesRead=0x12dc38*=0x279e, lpOverlapped=0x0) returned 1 [0153.916] CloseHandle (hObject=0x344) returned 1 [0153.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", lpFilePart=0x0) returned 0x59 [0153.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0153.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.945] GetFileType (hFile=0x344) returned 0x1 [0153.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0153.946] GetFileType (hFile=0x344) returned 0x1 [0153.946] WriteFile (in: hFile=0x344, lpBuffer=0x283fb78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x283fb78*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0153.947] CloseHandle (hObject=0x344) returned 1 [0153.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", lpFilePart=0x0) returned 0x59 [0153.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.948] GetFileType (hFile=0x344) returned 0x1 [0153.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.948] GetFileType (hFile=0x344) returned 0x1 [0153.948] WriteFile (in: hFile=0x344, lpBuffer=0x283bd28*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x283bd28*, lpNumberOfBytesWritten=0x12dc98*=0x27a0, lpOverlapped=0x0) returned 1 [0153.950] CloseHandle (hObject=0x344) returned 1 [0153.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx", lpFilePart=0x0) returned 0x59 [0153.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx.SYMMYWARE", lpFilePart=0x0) returned 0x63 [0153.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabf7d870, ftCreationTime.dwHighDateTime=0x1d5dd95, ftLastAccessTime.dwLowDateTime=0x90291190, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x9aec010, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x27a0)) returned 1 [0153.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0153.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\G9RDAT9dP6GD.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\g9rdat9dp6gd.docx.symmyware")) returned 1 [0153.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", lpFilePart=0x0) returned 0x61 [0153.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.952] GetFileType (hFile=0x344) returned 0x1 [0153.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.952] GetFileType (hFile=0x344) returned 0x1 [0153.952] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xfaad [0153.952] ReadFile (in: hFile=0x344, lpBuffer=0x2841198, nNumberOfBytesToRead=0xfaad, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2841198*, lpNumberOfBytesRead=0x12dc38*=0xfaad, lpOverlapped=0x0) returned 1 [0153.953] CloseHandle (hObject=0x344) returned 1 [0153.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", lpFilePart=0x0) returned 0x61 [0153.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0153.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0153.966] GetFileType (hFile=0x344) returned 0x1 [0153.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0153.966] GetFileType (hFile=0x344) returned 0x1 [0153.966] WriteFile (in: hFile=0x344, lpBuffer=0x28d01c8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x28d01c8*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0153.967] CloseHandle (hObject=0x344) returned 1 [0153.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", lpFilePart=0x0) returned 0x61 [0153.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.969] GetFileType (hFile=0x344) returned 0x1 [0153.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.969] GetFileType (hFile=0x344) returned 0x1 [0153.969] WriteFile (in: hFile=0x344, lpBuffer=0x28bf048*, nNumberOfBytesToWrite=0xfab0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x28bf048*, lpNumberOfBytesWritten=0x12dc98*=0xfab0, lpOverlapped=0x0) returned 1 [0153.972] CloseHandle (hObject=0x344) returned 1 [0153.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx", lpFilePart=0x0) returned 0x61 [0153.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx.SYMMYWARE", lpFilePart=0x0) returned 0x6b [0153.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0153.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4181120, ftCreationTime.dwHighDateTime=0x1d5db8c, ftLastAccessTime.dwLowDateTime=0x66e297d0, ftLastAccessTime.dwHighDateTime=0x1d5dd17, ftLastWriteTime.dwLowDateTime=0x9b10a00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xfab0)) returned 1 [0153.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0153.973] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\hGXOM8c2noZhJcBR5BUN.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\hgxom8c2nozhjcbr5bun.docx.symmyware")) returned 1 [0153.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", lpFilePart=0x0) returned 0x50 [0153.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0153.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0153.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0153.975] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x11fab [0153.975] ReadFile (in: hFile=0x344, lpBuffer=0x28d17f8, nNumberOfBytesToRead=0x11fab, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28d17f8*, lpNumberOfBytesRead=0x12dc38*=0x11fab, lpOverlapped=0x0) returned 1 [0154.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", lpFilePart=0x0) returned 0x50 [0154.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0154.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.073] GetFileType (hFile=0x344) returned 0x1 [0154.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0154.073] GetFileType (hFile=0x344) returned 0x1 [0154.073] WriteFile (in: hFile=0x344, lpBuffer=0x276fb90*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x276fb90*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0154.074] CloseHandle (hObject=0x344) returned 1 [0154.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", lpFilePart=0x0) returned 0x50 [0154.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.076] GetFileType (hFile=0x344) returned 0x1 [0154.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.076] GetFileType (hFile=0x344) returned 0x1 [0154.076] WriteFile (in: hFile=0x344, lpBuffer=0x275c550*, nNumberOfBytesToWrite=0x11fb0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x275c550*, lpNumberOfBytesWritten=0x12dc98*=0x11fb0, lpOverlapped=0x0) returned 1 [0154.078] CloseHandle (hObject=0x344) returned 1 [0154.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp", lpFilePart=0x0) returned 0x50 [0154.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0154.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0154.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e919570, ftCreationTime.dwHighDateTime=0x1d5dfe7, ftLastAccessTime.dwLowDateTime=0x8729a210, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x9c136a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11fb0)) returned 1 [0154.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0154.079] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\l3H3.odp.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\l3h3.odp.symmyware")) returned 1 [0154.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", lpFilePart=0x0) returned 0x53 [0154.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.080] GetFileType (hFile=0x344) returned 0x1 [0154.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.080] GetFileType (hFile=0x344) returned 0x1 [0154.080] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x6b15 [0154.081] ReadFile (in: hFile=0x344, lpBuffer=0x2771120, nNumberOfBytesToRead=0x6b15, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2771120*, lpNumberOfBytesRead=0x12dc38*=0x6b15, lpOverlapped=0x0) returned 1 [0154.082] CloseHandle (hObject=0x344) returned 1 [0154.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", lpFilePart=0x0) returned 0x53 [0154.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0154.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.095] GetFileType (hFile=0x344) returned 0x1 [0154.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0154.095] GetFileType (hFile=0x344) returned 0x1 [0154.095] WriteFile (in: hFile=0x344, lpBuffer=0x27e9af0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x27e9af0*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0154.097] CloseHandle (hObject=0x344) returned 1 [0154.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", lpFilePart=0x0) returned 0x53 [0154.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.098] GetFileType (hFile=0x344) returned 0x1 [0154.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.099] GetFileType (hFile=0x344) returned 0x1 [0154.099] WriteFile (in: hFile=0x344, lpBuffer=0x27e1940*, nNumberOfBytesToWrite=0x6b20, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x27e1940*, lpNumberOfBytesWritten=0x12dc98*=0x6b20, lpOverlapped=0x0) returned 1 [0154.101] CloseHandle (hObject=0x344) returned 1 [0154.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls", lpFilePart=0x0) returned 0x53 [0154.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls.SYMMYWARE", lpFilePart=0x0) returned 0x5d [0154.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0154.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa56976d0, ftCreationTime.dwHighDateTime=0x1d5e30d, ftLastAccessTime.dwLowDateTime=0x14168dc0, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0x9c49200, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6b20)) returned 1 [0154.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0154.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\rpCWBOC.xls.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\rpcwboc.xls.symmyware")) returned 1 [0154.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", lpFilePart=0x0) returned 0x52 [0154.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.105] GetFileType (hFile=0x344) returned 0x1 [0154.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.105] GetFileType (hFile=0x344) returned 0x1 [0154.105] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x43e9 [0154.105] ReadFile (in: hFile=0x344, lpBuffer=0x27eb090, nNumberOfBytesToRead=0x43e9, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27eb090*, lpNumberOfBytesRead=0x12dc38*=0x43e9, lpOverlapped=0x0) returned 1 [0154.107] CloseHandle (hObject=0x344) returned 1 [0154.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", lpFilePart=0x0) returned 0x52 [0154.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0154.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.120] GetFileType (hFile=0x344) returned 0x1 [0154.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0154.120] GetFileType (hFile=0x344) returned 0x1 [0154.120] WriteFile (in: hFile=0x344, lpBuffer=0x2854d58*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2854d58*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0154.121] CloseHandle (hObject=0x344) returned 1 [0154.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", lpFilePart=0x0) returned 0x52 [0154.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.123] GetFileType (hFile=0x344) returned 0x1 [0154.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.123] GetFileType (hFile=0x344) returned 0x1 [0154.123] WriteFile (in: hFile=0x344, lpBuffer=0x284f2d8*, nNumberOfBytesToWrite=0x43f0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x284f2d8*, lpNumberOfBytesWritten=0x12dc98*=0x43f0, lpOverlapped=0x0) returned 1 [0154.124] CloseHandle (hObject=0x344) returned 1 [0154.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt", lpFilePart=0x0) returned 0x52 [0154.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt.SYMMYWARE", lpFilePart=0x0) returned 0x5c [0154.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0154.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b16770, ftCreationTime.dwHighDateTime=0x1d5e747, ftLastAccessTime.dwLowDateTime=0x82393a0, ftLastAccessTime.dwHighDateTime=0x1d5ddeb, ftLastWriteTime.dwLowDateTime=0x9c83b80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x43f0)) returned 1 [0154.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0154.125] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\UZPiQS.ppt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\uzpiqs.ppt.symmyware")) returned 1 [0154.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", lpFilePart=0x0) returned 0x5d [0154.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.127] GetFileType (hFile=0x344) returned 0x1 [0154.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.127] GetFileType (hFile=0x344) returned 0x1 [0154.127] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1245a [0154.127] ReadFile (in: hFile=0x344, lpBuffer=0x2856328, nNumberOfBytesToRead=0x1245a, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2856328*, lpNumberOfBytesRead=0x12dc38*=0x1245a, lpOverlapped=0x0) returned 1 [0154.129] CloseHandle (hObject=0x344) returned 1 [0154.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", lpFilePart=0x0) returned 0x5d [0154.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0154.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.161] GetFileType (hFile=0x344) returned 0x1 [0154.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0154.161] GetFileType (hFile=0x344) returned 0x1 [0154.161] WriteFile (in: hFile=0x344, lpBuffer=0x28efa08*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x28efa08*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0154.163] CloseHandle (hObject=0x344) returned 1 [0154.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", lpFilePart=0x0) returned 0x5d [0154.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.164] GetFileType (hFile=0x344) returned 0x1 [0154.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.164] GetFileType (hFile=0x344) returned 0x1 [0154.164] WriteFile (in: hFile=0x344, lpBuffer=0x28dbee8*, nNumberOfBytesToWrite=0x12460, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x28dbee8*, lpNumberOfBytesWritten=0x12dc98*=0x12460, lpOverlapped=0x0) returned 1 [0154.167] CloseHandle (hObject=0x344) returned 1 [0154.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp", lpFilePart=0x0) returned 0x5d [0154.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp.SYMMYWARE", lpFilePart=0x0) returned 0x67 [0154.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0154.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8b6a70, ftCreationTime.dwHighDateTime=0x1d5ddac, ftLastAccessTime.dwLowDateTime=0x964fca70, ftLastAccessTime.dwHighDateTime=0x1d5d96a, ftLastWriteTime.dwLowDateTime=0x9ce7d10, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x12460)) returned 1 [0154.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0154.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\VxynWnB NV2 Ase2Y.odp.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\vxynwnb nv2 ase2y.odp.symmyware")) returned 1 [0154.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0154.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0154.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\n2C5HGD-qSghQL5aC\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\n2c5hgd-qsghql5ac\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.170] GetFileType (hFile=0x344) returned 0x1 [0154.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0154.170] GetFileType (hFile=0x344) returned 0x1 [0154.171] WriteFile (in: hFile=0x344, lpBuffer=0x28f3108*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x28f3108*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0154.172] CloseHandle (hObject=0x344) returned 1 [0154.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0154.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0154.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iyEykYnqxmG6o\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyeykynqxmg6o\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.173] GetFileType (hFile=0x344) returned 0x1 [0154.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0154.173] GetFileType (hFile=0x344) returned 0x1 [0154.174] WriteFile (in: hFile=0x344, lpBuffer=0x28f63c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28f63c0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0154.175] CloseHandle (hObject=0x344) returned 1 [0154.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL", lpFilePart=0x0) returned 0x37 [0154.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\", lpFilePart=0x0) returned 0x38 [0154.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.176] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6cade0, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x535a99b0, ftLastAccessTime.dwHighDateTime=0x1d5e36b, ftLastWriteTime.dwLowDateTime=0x535a99b0, ftLastWriteTime.dwHighDateTime=0x1d5e36b, nFileSizeHigh=0x0, nFileSizeLow=0x2f6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="70IApV.rtf", cAlternateFileName="")) returned 1 [0154.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc382bc00, ftCreationTime.dwHighDateTime=0x1d5dea6, ftLastAccessTime.dwLowDateTime=0xc977a2c0, ftLastAccessTime.dwHighDateTime=0x1d5d8ec, ftLastWriteTime.dwLowDateTime=0xc977a2c0, ftLastWriteTime.dwHighDateTime=0x1d5d8ec, nFileSizeHigh=0x0, nFileSizeLow=0x43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="bGxAjgGGeijkxl1SguT.xlsx", cAlternateFileName="BGXAJG~1.XLS")) returned 1 [0154.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5f73d30, ftCreationTime.dwHighDateTime=0x1d5dd2d, ftLastAccessTime.dwLowDateTime=0x21958d40, ftLastAccessTime.dwHighDateTime=0x1d5e67c, ftLastWriteTime.dwLowDateTime=0x21958d40, ftLastWriteTime.dwHighDateTime=0x1d5e67c, nFileSizeHigh=0x0, nFileSizeLow=0x1de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRtr.xls", cAlternateFileName="")) returned 1 [0154.177] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6694c0, ftCreationTime.dwHighDateTime=0x1d5dcfd, ftLastAccessTime.dwLowDateTime=0xa6556490, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0xa6556490, ftLastWriteTime.dwHighDateTime=0x1d5d9e5, nFileSizeHigh=0x0, nFileSizeLow=0x17536, dwReserved0=0x0, dwReserved1=0x0, cFileName="f8fT4eS0LE6pvX.odt", cAlternateFileName="F8FT4E~1.ODT")) returned 1 [0154.178] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b1be0, ftCreationTime.dwHighDateTime=0x1d5de1e, ftLastAccessTime.dwLowDateTime=0x160d87c0, ftLastAccessTime.dwHighDateTime=0x1d5d826, ftLastWriteTime.dwLowDateTime=0x160d87c0, ftLastWriteTime.dwHighDateTime=0x1d5d826, nFileSizeHigh=0x0, nFileSizeLow=0x13d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCW3SE9.ods", cAlternateFileName="")) returned 1 [0154.178] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c40fb0, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0x9c89acf0, ftLastAccessTime.dwHighDateTime=0x1d5dc15, ftLastWriteTime.dwLowDateTime=0x9c89acf0, ftLastWriteTime.dwHighDateTime=0x1d5dc15, nFileSizeHigh=0x0, nFileSizeLow=0x7a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="kK9SGDA.odp", cAlternateFileName="")) returned 1 [0154.178] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9c7160, ftCreationTime.dwHighDateTime=0x1d5e36d, ftLastAccessTime.dwLowDateTime=0xe8f58a50, ftLastAccessTime.dwHighDateTime=0x1d5e165, ftLastWriteTime.dwLowDateTime=0xe8f58a50, ftLastWriteTime.dwHighDateTime=0x1d5e165, nFileSizeHigh=0x0, nFileSizeLow=0x3ae3, dwReserved0=0x0, dwReserved1=0x0, cFileName="luMw90nLjv.docx", cAlternateFileName="LUMW90~1.DOC")) returned 1 [0154.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29199b0, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc357c6d0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0xc357c6d0, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0x143b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetNkxgiLz1MEQ.doc", cAlternateFileName="METNKX~1.DOC")) returned 1 [0154.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef03100, ftCreationTime.dwHighDateTime=0x1d5db23, ftLastAccessTime.dwLowDateTime=0xfbaacab0, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0xfbaacab0, ftLastWriteTime.dwHighDateTime=0x1d5d946, nFileSizeHigh=0x0, nFileSizeLow=0x12851, dwReserved0=0x0, dwReserved1=0x0, cFileName="qpYA8SixQ2WET1GE.doc", cAlternateFileName="QPYA8S~1.DOC")) returned 1 [0154.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa322550, ftCreationTime.dwHighDateTime=0x1d5dde4, ftLastAccessTime.dwLowDateTime=0xc842b200, ftLastAccessTime.dwHighDateTime=0x1d5df8b, ftLastWriteTime.dwLowDateTime=0xc842b200, ftLastWriteTime.dwHighDateTime=0x1d5df8b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RBREb T9.pdf", cAlternateFileName="RBREBT~1.PDF")) returned 1 [0154.179] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7d7ab0, ftCreationTime.dwHighDateTime=0x1d5e061, ftLastAccessTime.dwLowDateTime=0x294269c0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x294269c0, ftLastWriteTime.dwHighDateTime=0x1d5e58f, nFileSizeHigh=0x0, nFileSizeLow=0x62d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rlB2gVU 0aDw.pps", cAlternateFileName="RLB2GV~1.PPS")) returned 1 [0154.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fed430, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0xf7d18120, ftLastAccessTime.dwHighDateTime=0x1d5d993, ftLastWriteTime.dwLowDateTime=0xf7d18120, ftLastWriteTime.dwHighDateTime=0x1d5d993, nFileSizeHigh=0x0, nFileSizeLow=0x5d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNgQgXVY.odt", cAlternateFileName="")) returned 1 [0154.180] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.180] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0154.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0154.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL", lpFilePart=0x0) returned 0x37 [0154.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\", lpFilePart=0x0) returned 0x38 [0154.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.181] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58278cb0, ftCreationTime.dwHighDateTime=0x1d5de29, ftLastAccessTime.dwLowDateTime=0xa1545a00, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0xa1545a00, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.182] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6cade0, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x535a99b0, ftLastAccessTime.dwHighDateTime=0x1d5e36b, ftLastWriteTime.dwLowDateTime=0x535a99b0, ftLastWriteTime.dwHighDateTime=0x1d5e36b, nFileSizeHigh=0x0, nFileSizeLow=0x2f6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="70IApV.rtf", cAlternateFileName="")) returned 1 [0154.182] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc382bc00, ftCreationTime.dwHighDateTime=0x1d5dea6, ftLastAccessTime.dwLowDateTime=0xc977a2c0, ftLastAccessTime.dwHighDateTime=0x1d5d8ec, ftLastWriteTime.dwLowDateTime=0xc977a2c0, ftLastWriteTime.dwHighDateTime=0x1d5d8ec, nFileSizeHigh=0x0, nFileSizeLow=0x43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="bGxAjgGGeijkxl1SguT.xlsx", cAlternateFileName="BGXAJG~1.XLS")) returned 1 [0154.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5f73d30, ftCreationTime.dwHighDateTime=0x1d5dd2d, ftLastAccessTime.dwLowDateTime=0x21958d40, ftLastAccessTime.dwHighDateTime=0x1d5e67c, ftLastWriteTime.dwLowDateTime=0x21958d40, ftLastWriteTime.dwHighDateTime=0x1d5e67c, nFileSizeHigh=0x0, nFileSizeLow=0x1de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRtr.xls", cAlternateFileName="")) returned 1 [0154.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6694c0, ftCreationTime.dwHighDateTime=0x1d5dcfd, ftLastAccessTime.dwLowDateTime=0xa6556490, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0xa6556490, ftLastWriteTime.dwHighDateTime=0x1d5d9e5, nFileSizeHigh=0x0, nFileSizeLow=0x17536, dwReserved0=0x0, dwReserved1=0x0, cFileName="f8fT4eS0LE6pvX.odt", cAlternateFileName="F8FT4E~1.ODT")) returned 1 [0154.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b1be0, ftCreationTime.dwHighDateTime=0x1d5de1e, ftLastAccessTime.dwLowDateTime=0x160d87c0, ftLastAccessTime.dwHighDateTime=0x1d5d826, ftLastWriteTime.dwLowDateTime=0x160d87c0, ftLastWriteTime.dwHighDateTime=0x1d5d826, nFileSizeHigh=0x0, nFileSizeLow=0x13d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCW3SE9.ods", cAlternateFileName="")) returned 1 [0154.183] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c40fb0, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0x9c89acf0, ftLastAccessTime.dwHighDateTime=0x1d5dc15, ftLastWriteTime.dwLowDateTime=0x9c89acf0, ftLastWriteTime.dwHighDateTime=0x1d5dc15, nFileSizeHigh=0x0, nFileSizeLow=0x7a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="kK9SGDA.odp", cAlternateFileName="")) returned 1 [0154.184] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9c7160, ftCreationTime.dwHighDateTime=0x1d5e36d, ftLastAccessTime.dwLowDateTime=0xe8f58a50, ftLastAccessTime.dwHighDateTime=0x1d5e165, ftLastWriteTime.dwLowDateTime=0xe8f58a50, ftLastWriteTime.dwHighDateTime=0x1d5e165, nFileSizeHigh=0x0, nFileSizeLow=0x3ae3, dwReserved0=0x0, dwReserved1=0x0, cFileName="luMw90nLjv.docx", cAlternateFileName="LUMW90~1.DOC")) returned 1 [0154.184] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29199b0, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc357c6d0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0xc357c6d0, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0x143b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetNkxgiLz1MEQ.doc", cAlternateFileName="METNKX~1.DOC")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef03100, ftCreationTime.dwHighDateTime=0x1d5db23, ftLastAccessTime.dwLowDateTime=0xfbaacab0, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0xfbaacab0, ftLastWriteTime.dwHighDateTime=0x1d5d946, nFileSizeHigh=0x0, nFileSizeLow=0x12851, dwReserved0=0x0, dwReserved1=0x0, cFileName="qpYA8SixQ2WET1GE.doc", cAlternateFileName="QPYA8S~1.DOC")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa322550, ftCreationTime.dwHighDateTime=0x1d5dde4, ftLastAccessTime.dwLowDateTime=0xc842b200, ftLastAccessTime.dwHighDateTime=0x1d5df8b, ftLastWriteTime.dwLowDateTime=0xc842b200, ftLastWriteTime.dwHighDateTime=0x1d5df8b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RBREb T9.pdf", cAlternateFileName="RBREBT~1.PDF")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7d7ab0, ftCreationTime.dwHighDateTime=0x1d5e061, ftLastAccessTime.dwLowDateTime=0x294269c0, ftLastAccessTime.dwHighDateTime=0x1d5e58f, ftLastWriteTime.dwLowDateTime=0x294269c0, ftLastWriteTime.dwHighDateTime=0x1d5e58f, nFileSizeHigh=0x0, nFileSizeLow=0x62d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rlB2gVU 0aDw.pps", cAlternateFileName="RLB2GV~1.PPS")) returned 1 [0154.185] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fed430, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0xf7d18120, ftLastAccessTime.dwHighDateTime=0x1d5d993, ftLastWriteTime.dwLowDateTime=0xf7d18120, ftLastWriteTime.dwHighDateTime=0x1d5d993, nFileSizeHigh=0x0, nFileSizeLow=0x5d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNgQgXVY.odt", cAlternateFileName="")) returned 1 [0154.186] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fed430, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0xf7d18120, ftLastAccessTime.dwHighDateTime=0x1d5d993, ftLastWriteTime.dwLowDateTime=0xf7d18120, ftLastWriteTime.dwHighDateTime=0x1d5d993, nFileSizeHigh=0x0, nFileSizeLow=0x5d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNgQgXVY.odt", cAlternateFileName="")) returned 0 [0154.186] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0154.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0154.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", lpFilePart=0x0) returned 0x42 [0154.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.187] GetFileType (hFile=0x344) returned 0x1 [0154.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.187] GetFileType (hFile=0x344) returned 0x1 [0154.187] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x2f6f [0154.189] ReadFile (in: hFile=0x344, lpBuffer=0x28fc560, nNumberOfBytesToRead=0x2f6f, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28fc560*, lpNumberOfBytesRead=0x12dcb8*=0x2f6f, lpOverlapped=0x0) returned 1 [0154.191] CloseHandle (hObject=0x344) returned 1 [0154.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", lpFilePart=0x0) returned 0x42 [0154.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.265] GetFileType (hFile=0x344) returned 0x1 [0154.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.265] GetFileType (hFile=0x344) returned 0x1 [0154.265] WriteFile (in: hFile=0x344, lpBuffer=0x274f870*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x274f870*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.266] CloseHandle (hObject=0x344) returned 1 [0154.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", lpFilePart=0x0) returned 0x42 [0154.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.267] GetFileType (hFile=0x344) returned 0x1 [0154.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.268] GetFileType (hFile=0x344) returned 0x1 [0154.268] WriteFile (in: hFile=0x344, lpBuffer=0x274b290*, nNumberOfBytesToWrite=0x2f70, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x274b290*, lpNumberOfBytesWritten=0x12dd18*=0x2f70, lpOverlapped=0x0) returned 1 [0154.269] CloseHandle (hObject=0x344) returned 1 [0154.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf", lpFilePart=0x0) returned 0x42 [0154.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf.SYMMYWARE", lpFilePart=0x0) returned 0x4c [0154.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6cade0, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x535a99b0, ftLastAccessTime.dwHighDateTime=0x1d5e36b, ftLastWriteTime.dwLowDateTime=0x9dde660, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2f70)) returned 1 [0154.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\70IApV.rtf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\70iapv.rtf.symmyware")) returned 1 [0154.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", lpFilePart=0x0) returned 0x50 [0154.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.271] GetFileType (hFile=0x344) returned 0x1 [0154.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.271] GetFileType (hFile=0x344) returned 0x1 [0154.271] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x43ca [0154.271] ReadFile (in: hFile=0x344, lpBuffer=0x2750db0, nNumberOfBytesToRead=0x43ca, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2750db0*, lpNumberOfBytesRead=0x12dcb8*=0x43ca, lpOverlapped=0x0) returned 1 [0154.272] CloseHandle (hObject=0x344) returned 1 [0154.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", lpFilePart=0x0) returned 0x50 [0154.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.347] GetFileType (hFile=0x344) returned 0x1 [0154.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.347] GetFileType (hFile=0x344) returned 0x1 [0154.347] WriteFile (in: hFile=0x344, lpBuffer=0x27babc0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27babc0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.349] CloseHandle (hObject=0x344) returned 1 [0154.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", lpFilePart=0x0) returned 0x50 [0154.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.350] GetFileType (hFile=0x344) returned 0x1 [0154.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.350] GetFileType (hFile=0x344) returned 0x1 [0154.350] WriteFile (in: hFile=0x344, lpBuffer=0x27b5140*, nNumberOfBytesToWrite=0x43d0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27b5140*, lpNumberOfBytesWritten=0x12dd18*=0x43d0, lpOverlapped=0x0) returned 1 [0154.352] CloseHandle (hObject=0x344) returned 1 [0154.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx", lpFilePart=0x0) returned 0x50 [0154.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0154.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc382bc00, ftCreationTime.dwHighDateTime=0x1d5dea6, ftLastAccessTime.dwLowDateTime=0xc977a2c0, ftLastAccessTime.dwHighDateTime=0x1d5d8ec, ftLastWriteTime.dwLowDateTime=0x9ea9090, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x43d0)) returned 1 [0154.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.352] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\bGxAjgGGeijkxl1SguT.xlsx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\bgxajgggeijkxl1sgut.xlsx.symmyware")) returned 1 [0154.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", lpFilePart=0x0) returned 0x40 [0154.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.354] GetFileType (hFile=0x344) returned 0x1 [0154.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.354] GetFileType (hFile=0x344) returned 0x1 [0154.354] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1de2 [0154.354] ReadFile (in: hFile=0x344, lpBuffer=0x27bc150, nNumberOfBytesToRead=0x1de2, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27bc150*, lpNumberOfBytesRead=0x12dcb8*=0x1de2, lpOverlapped=0x0) returned 1 [0154.356] CloseHandle (hObject=0x344) returned 1 [0154.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", lpFilePart=0x0) returned 0x40 [0154.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.424] GetFileType (hFile=0x344) returned 0x1 [0154.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.424] GetFileType (hFile=0x344) returned 0x1 [0154.424] WriteFile (in: hFile=0x344, lpBuffer=0x28179f8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28179f8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.426] CloseHandle (hObject=0x344) returned 1 [0154.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", lpFilePart=0x0) returned 0x40 [0154.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.427] GetFileType (hFile=0x344) returned 0x1 [0154.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.427] GetFileType (hFile=0x344) returned 0x1 [0154.427] WriteFile (in: hFile=0x344, lpBuffer=0x2814598*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2814598*, lpNumberOfBytesWritten=0x12dd18*=0x1df0, lpOverlapped=0x0) returned 1 [0154.441] CloseHandle (hObject=0x344) returned 1 [0154.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls", lpFilePart=0x0) returned 0x40 [0154.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0154.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5f73d30, ftCreationTime.dwHighDateTime=0x1d5dd2d, ftLastAccessTime.dwLowDateTime=0x21958d40, ftLastAccessTime.dwHighDateTime=0x1d5e67c, ftLastWriteTime.dwLowDateTime=0x9f7d700, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1df0)) returned 1 [0154.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.441] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\CRtr.xls.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\crtr.xls.symmyware")) returned 1 [0154.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", lpFilePart=0x0) returned 0x4a [0154.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.443] GetFileType (hFile=0x344) returned 0x1 [0154.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.443] GetFileType (hFile=0x344) returned 0x1 [0154.443] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x17536 [0154.443] ReadFile (in: hFile=0x344, lpBuffer=0x12925cb8, nNumberOfBytesToRead=0x17536, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12925cb8*, lpNumberOfBytesRead=0x12dcb8*=0x17536, lpOverlapped=0x0) returned 1 [0154.445] CloseHandle (hObject=0x344) returned 1 [0154.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", lpFilePart=0x0) returned 0x4a [0154.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.457] GetFileType (hFile=0x344) returned 0x1 [0154.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.458] GetFileType (hFile=0x344) returned 0x1 [0154.458] WriteFile (in: hFile=0x344, lpBuffer=0x2869400*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2869400*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.459] CloseHandle (hObject=0x344) returned 1 [0154.459] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", lpFilePart=0x0) returned 0x4a [0154.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.460] GetFileType (hFile=0x344) returned 0x1 [0154.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.460] GetFileType (hFile=0x344) returned 0x1 [0154.460] WriteFile (in: hFile=0x344, lpBuffer=0x1296bcf8*, nNumberOfBytesToWrite=0x17540, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x1296bcf8*, lpNumberOfBytesWritten=0x12dd18*=0x17540, lpOverlapped=0x0) returned 1 [0154.462] CloseHandle (hObject=0x344) returned 1 [0154.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt", lpFilePart=0x0) returned 0x4a [0154.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt.SYMMYWARE", lpFilePart=0x0) returned 0x54 [0154.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6694c0, ftCreationTime.dwHighDateTime=0x1d5dcfd, ftLastAccessTime.dwLowDateTime=0xa6556490, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0x9fb0b50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x17540)) returned 1 [0154.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\f8fT4eS0LE6pvX.odt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\f8ft4es0le6pvx.odt.symmyware")) returned 1 [0154.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", lpFilePart=0x0) returned 0x43 [0154.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.464] GetFileType (hFile=0x344) returned 0x1 [0154.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.464] GetFileType (hFile=0x344) returned 0x1 [0154.465] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x13d1 [0154.465] ReadFile (in: hFile=0x344, lpBuffer=0x286a950, nNumberOfBytesToRead=0x13d1, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x286a950*, lpNumberOfBytesRead=0x12dcb8*=0x13d1, lpOverlapped=0x0) returned 1 [0154.466] CloseHandle (hObject=0x344) returned 1 [0154.475] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", lpFilePart=0x0) returned 0x43 [0154.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.477] GetFileType (hFile=0x344) returned 0x1 [0154.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.477] GetFileType (hFile=0x344) returned 0x1 [0154.477] WriteFile (in: hFile=0x344, lpBuffer=0x28c2598*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28c2598*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.479] CloseHandle (hObject=0x344) returned 1 [0154.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", lpFilePart=0x0) returned 0x43 [0154.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.481] GetFileType (hFile=0x344) returned 0x1 [0154.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.481] GetFileType (hFile=0x344) returned 0x1 [0154.481] WriteFile (in: hFile=0x344, lpBuffer=0x28bfb48*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28bfb48*, lpNumberOfBytesWritten=0x12dd18*=0x13e0, lpOverlapped=0x0) returned 1 [0154.484] CloseHandle (hObject=0x344) returned 1 [0154.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods", lpFilePart=0x0) returned 0x43 [0154.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0154.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b1be0, ftCreationTime.dwHighDateTime=0x1d5de1e, ftLastAccessTime.dwLowDateTime=0x160d87c0, ftLastAccessTime.dwHighDateTime=0x1d5d826, ftLastWriteTime.dwLowDateTime=0x9fe66b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x13e0)) returned 1 [0154.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.484] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\FCW3SE9.ods.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\fcw3se9.ods.symmyware")) returned 1 [0154.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", lpFilePart=0x0) returned 0x43 [0154.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.486] GetFileType (hFile=0x344) returned 0x1 [0154.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.486] GetFileType (hFile=0x344) returned 0x1 [0154.486] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x7a91 [0154.486] ReadFile (in: hFile=0x344, lpBuffer=0x28c3a98, nNumberOfBytesToRead=0x7a91, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28c3a98*, lpNumberOfBytesRead=0x12dcb8*=0x7a91, lpOverlapped=0x0) returned 1 [0154.487] CloseHandle (hObject=0x344) returned 1 [0154.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", lpFilePart=0x0) returned 0x43 [0154.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.569] GetFileType (hFile=0x344) returned 0x1 [0154.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.569] GetFileType (hFile=0x344) returned 0x1 [0154.569] WriteFile (in: hFile=0x344, lpBuffer=0x2746b08*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2746b08*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.571] CloseHandle (hObject=0x344) returned 1 [0154.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", lpFilePart=0x0) returned 0x43 [0154.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.572] GetFileType (hFile=0x344) returned 0x1 [0154.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.573] GetFileType (hFile=0x344) returned 0x1 [0154.573] WriteFile (in: hFile=0x344, lpBuffer=0x273d9f8*, nNumberOfBytesToWrite=0x7aa0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x273d9f8*, lpNumberOfBytesWritten=0x12dd18*=0x7aa0, lpOverlapped=0x0) returned 1 [0154.576] CloseHandle (hObject=0x344) returned 1 [0154.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp", lpFilePart=0x0) returned 0x43 [0154.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0154.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c40fb0, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0x9c89acf0, ftLastAccessTime.dwHighDateTime=0x1d5dc15, ftLastWriteTime.dwLowDateTime=0xa0c4960, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x7aa0)) returned 1 [0154.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\kK9SGDA.odp.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\kk9sgda.odp.symmyware")) returned 1 [0154.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", lpFilePart=0x0) returned 0x47 [0154.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.578] GetFileType (hFile=0x344) returned 0x1 [0154.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.578] GetFileType (hFile=0x344) returned 0x1 [0154.579] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x3ae3 [0154.579] ReadFile (in: hFile=0x344, lpBuffer=0x2748018, nNumberOfBytesToRead=0x3ae3, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2748018*, lpNumberOfBytesRead=0x12dcb8*=0x3ae3, lpOverlapped=0x0) returned 1 [0154.580] CloseHandle (hObject=0x344) returned 1 [0154.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", lpFilePart=0x0) returned 0x47 [0154.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.591] GetFileType (hFile=0x344) returned 0x1 [0154.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.591] GetFileType (hFile=0x344) returned 0x1 [0154.592] WriteFile (in: hFile=0x344, lpBuffer=0x27ae8b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27ae8b8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.593] CloseHandle (hObject=0x344) returned 1 [0154.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", lpFilePart=0x0) returned 0x47 [0154.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.594] GetFileType (hFile=0x344) returned 0x1 [0154.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.594] GetFileType (hFile=0x344) returned 0x1 [0154.594] WriteFile (in: hFile=0x344, lpBuffer=0x27a9748*, nNumberOfBytesToWrite=0x3af0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27a9748*, lpNumberOfBytesWritten=0x12dd18*=0x3af0, lpOverlapped=0x0) returned 1 [0154.596] CloseHandle (hObject=0x344) returned 1 [0154.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx", lpFilePart=0x0) returned 0x47 [0154.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx.SYMMYWARE", lpFilePart=0x0) returned 0x51 [0154.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9c7160, ftCreationTime.dwHighDateTime=0x1d5e36d, ftLastAccessTime.dwLowDateTime=0xe8f58a50, ftLastAccessTime.dwHighDateTime=0x1d5e165, ftLastWriteTime.dwLowDateTime=0xa0f56a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3af0)) returned 1 [0154.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\luMw90nLjv.docx.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\lumw90nljv.docx.symmyware")) returned 1 [0154.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", lpFilePart=0x0) returned 0x4a [0154.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.598] GetFileType (hFile=0x344) returned 0x1 [0154.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.598] GetFileType (hFile=0x344) returned 0x1 [0154.598] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x143b9 [0154.598] ReadFile (in: hFile=0x344, lpBuffer=0x27afe00, nNumberOfBytesToRead=0x143b9, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27afe00*, lpNumberOfBytesRead=0x12dcb8*=0x143b9, lpOverlapped=0x0) returned 1 [0154.600] CloseHandle (hObject=0x344) returned 1 [0154.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", lpFilePart=0x0) returned 0x4a [0154.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.613] GetFileType (hFile=0x344) returned 0x1 [0154.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.613] GetFileType (hFile=0x344) returned 0x1 [0154.614] WriteFile (in: hFile=0x344, lpBuffer=0x2851230*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2851230*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.615] CloseHandle (hObject=0x344) returned 1 [0154.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", lpFilePart=0x0) returned 0x4a [0154.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.616] GetFileType (hFile=0x344) returned 0x1 [0154.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.616] GetFileType (hFile=0x344) returned 0x1 [0154.616] WriteFile (in: hFile=0x344, lpBuffer=0x283b7e0*, nNumberOfBytesToWrite=0x143c0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x283b7e0*, lpNumberOfBytesWritten=0x12dd18*=0x143c0, lpOverlapped=0x0) returned 1 [0154.619] CloseHandle (hObject=0x344) returned 1 [0154.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc", lpFilePart=0x0) returned 0x4a [0154.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc.SYMMYWARE", lpFilePart=0x0) returned 0x54 [0154.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29199b0, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc357c6d0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0xa130020, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x143c0)) returned 1 [0154.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\MetNkxgiLz1MEQ.doc.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\metnkxgilz1meq.doc.symmyware")) returned 1 [0154.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", lpFilePart=0x0) returned 0x4c [0154.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.621] GetFileType (hFile=0x344) returned 0x1 [0154.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.621] GetFileType (hFile=0x344) returned 0x1 [0154.621] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x12851 [0154.621] ReadFile (in: hFile=0x344, lpBuffer=0x28527b0, nNumberOfBytesToRead=0x12851, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28527b0*, lpNumberOfBytesRead=0x12dcb8*=0x12851, lpOverlapped=0x0) returned 1 [0154.649] CloseHandle (hObject=0x344) returned 1 [0154.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", lpFilePart=0x0) returned 0x4c [0154.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.682] GetFileType (hFile=0x344) returned 0x1 [0154.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.682] GetFileType (hFile=0x344) returned 0x1 [0154.682] WriteFile (in: hFile=0x344, lpBuffer=0x26fdba8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x26fdba8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.683] CloseHandle (hObject=0x344) returned 1 [0154.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", lpFilePart=0x0) returned 0x4c [0154.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.686] GetFileType (hFile=0x344) returned 0x1 [0154.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.686] GetFileType (hFile=0x344) returned 0x1 [0154.686] WriteFile (in: hFile=0x344, lpBuffer=0x26e9ca8*, nNumberOfBytesToWrite=0x12860, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x26e9ca8*, lpNumberOfBytesWritten=0x12dd18*=0x12860, lpOverlapped=0x0) returned 1 [0154.688] CloseHandle (hObject=0x344) returned 1 [0154.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc", lpFilePart=0x0) returned 0x4c [0154.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0154.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef03100, ftCreationTime.dwHighDateTime=0x1d5db23, ftLastAccessTime.dwLowDateTime=0xfbaacab0, ftLastAccessTime.dwHighDateTime=0x1d5d946, ftLastWriteTime.dwLowDateTime=0xa1d3950, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x12860)) returned 1 [0154.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.689] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\qpYA8SixQ2WET1GE.doc.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\qpya8sixq2wet1ge.doc.symmyware")) returned 1 [0154.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", lpFilePart=0x0) returned 0x44 [0154.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.690] GetFileType (hFile=0x344) returned 0x1 [0154.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.690] GetFileType (hFile=0x344) returned 0x1 [0154.690] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x15b1a [0154.691] ReadFile (in: hFile=0x344, lpBuffer=0x126f7278, nNumberOfBytesToRead=0x15b1a, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x126f7278*, lpNumberOfBytesRead=0x12dcb8*=0x15b1a, lpOverlapped=0x0) returned 1 [0154.694] CloseHandle (hObject=0x344) returned 1 [0154.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", lpFilePart=0x0) returned 0x44 [0154.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.774] GetFileType (hFile=0x344) returned 0x1 [0154.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.774] GetFileType (hFile=0x344) returned 0x1 [0154.774] WriteFile (in: hFile=0x344, lpBuffer=0x274f7e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x274f7e8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.776] CloseHandle (hObject=0x344) returned 1 [0154.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", lpFilePart=0x0) returned 0x44 [0154.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.789] GetFileType (hFile=0x344) returned 0x1 [0154.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.789] GetFileType (hFile=0x344) returned 0x1 [0154.789] WriteFile (in: hFile=0x344, lpBuffer=0x12763ab8*, nNumberOfBytesToWrite=0x15b20, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x12763ab8*, lpNumberOfBytesWritten=0x12dd18*=0x15b20, lpOverlapped=0x0) returned 1 [0154.792] CloseHandle (hObject=0x344) returned 1 [0154.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf", lpFilePart=0x0) returned 0x44 [0154.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf.SYMMYWARE", lpFilePart=0x0) returned 0x4e [0154.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa322550, ftCreationTime.dwHighDateTime=0x1d5dde4, ftLastAccessTime.dwLowDateTime=0xc842b200, ftLastAccessTime.dwHighDateTime=0x1d5df8b, ftLastWriteTime.dwLowDateTime=0xa2ca2a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15b20)) returned 1 [0154.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.793] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\RBREb T9.pdf.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\rbreb t9.pdf.symmyware")) returned 1 [0154.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", lpFilePart=0x0) returned 0x44 [0154.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.795] GetFileType (hFile=0x344) returned 0x1 [0154.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.795] GetFileType (hFile=0x344) returned 0x1 [0154.795] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x5d94 [0154.795] ReadFile (in: hFile=0x344, lpBuffer=0x2750d38, nNumberOfBytesToRead=0x5d94, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2750d38*, lpNumberOfBytesRead=0x12dcb8*=0x5d94, lpOverlapped=0x0) returned 1 [0154.796] CloseHandle (hObject=0x344) returned 1 [0154.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", lpFilePart=0x0) returned 0x44 [0154.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0154.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.810] GetFileType (hFile=0x344) returned 0x1 [0154.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0154.810] GetFileType (hFile=0x344) returned 0x1 [0154.810] WriteFile (in: hFile=0x344, lpBuffer=0x27c4410*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27c4410*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0154.812] CloseHandle (hObject=0x344) returned 1 [0154.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", lpFilePart=0x0) returned 0x44 [0154.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0154.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.814] GetFileType (hFile=0x344) returned 0x1 [0154.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0154.814] GetFileType (hFile=0x344) returned 0x1 [0154.814] WriteFile (in: hFile=0x344, lpBuffer=0x27bcff0*, nNumberOfBytesToWrite=0x5da0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27bcff0*, lpNumberOfBytesWritten=0x12dd18*=0x5da0, lpOverlapped=0x0) returned 1 [0154.816] CloseHandle (hObject=0x344) returned 1 [0154.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt", lpFilePart=0x0) returned 0x44 [0154.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt.SYMMYWARE", lpFilePart=0x0) returned 0x4e [0154.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fed430, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0xf7d18120, ftLastAccessTime.dwHighDateTime=0x1d5d993, ftLastWriteTime.dwLowDateTime=0xa2ffe00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5da0)) returned 1 [0154.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0154.817] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SNgQgXVY.odt.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\sngqgxvy.odt.symmyware")) returned 1 [0154.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0154.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0154.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KIPiMPWP4zCxPrL\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kipimpwp4zcxprl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.819] GetFileType (hFile=0x344) returned 0x1 [0154.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0154.819] GetFileType (hFile=0x344) returned 0x1 [0154.821] WriteFile (in: hFile=0x344, lpBuffer=0x27c7a00*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27c7a00*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0154.860] CloseHandle (hObject=0x344) returned 1 [0154.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0154.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0154.861] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0154.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0154.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0154.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0154.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.868] GetFileType (hFile=0x344) returned 0x1 [0154.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0154.869] GetFileType (hFile=0x344) returned 0x1 [0154.870] WriteFile (in: hFile=0x344, lpBuffer=0x27cc0a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27cc0a8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0154.871] CloseHandle (hObject=0x344) returned 1 [0154.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0154.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0154.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0154.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0154.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0154.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0154.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0154.879] GetFileType (hFile=0x344) returned 0x1 [0154.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0154.879] GetFileType (hFile=0x344) returned 0x1 [0154.880] WriteFile (in: hFile=0x344, lpBuffer=0x27d0798*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27d0798*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0154.881] CloseHandle (hObject=0x344) returned 1 [0154.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0154.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0154.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.883] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0154.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0154.884] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0154.885] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0154.885] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0154.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0154.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0154.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0154.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0154.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.886] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0154.887] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0154.888] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.888] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0154.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0154.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0154.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0154.889] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0154.893] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.926] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0154.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0154.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0154.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0154.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0154.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0154.927] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0154.928] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0154.928] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0154.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0154.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0154.929] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x45 [0154.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0154.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0154.932] GetFileType (hFile=0x344) returned 0x1 [0154.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0154.933] GetFileType (hFile=0x344) returned 0x1 [0154.933] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x74e6 [0154.933] ReadFile (in: hFile=0x344, lpBuffer=0x27d6438, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27d6438*, lpNumberOfBytesRead=0x12dc38*=0x74e6, lpOverlapped=0x0) returned 1 [0154.935] CloseHandle (hObject=0x344) returned 1 [0155.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x45 [0155.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0155.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0155.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a3f0) returned 1 [0155.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0155.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0155.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.021] GetFileType (hFile=0x344) returned 0x1 [0155.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0155.022] GetFileType (hFile=0x344) returned 0x1 [0155.023] WriteFile (in: hFile=0x344, lpBuffer=0x2853de8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2853de8*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.025] CloseHandle (hObject=0x344) returned 1 [0155.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0155.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.030] GetFileType (hFile=0x344) returned 0x1 [0155.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.030] GetFileType (hFile=0x344) returned 0x1 [0155.031] WriteFile (in: hFile=0x344, lpBuffer=0x2857090*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2857090*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.032] CloseHandle (hObject=0x344) returned 1 [0155.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0155.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0155.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0155.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0155.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0155.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.039] GetFileType (hFile=0x344) returned 0x1 [0155.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.039] GetFileType (hFile=0x344) returned 0x1 [0155.040] WriteFile (in: hFile=0x344, lpBuffer=0x285b738*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x285b738*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.042] CloseHandle (hObject=0x344) returned 1 [0155.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0155.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0155.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0155.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.044] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0155.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0155.045] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0155.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0155.046] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0155.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0155.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.047] GetFileType (hFile=0x344) returned 0x1 [0155.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0155.047] GetFileType (hFile=0x344) returned 0x1 [0155.047] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x42400 [0155.048] ReadFile (in: hFile=0x344, lpBuffer=0x12779610, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12779610*, lpNumberOfBytesRead=0x12dcb8*=0x42400, lpOverlapped=0x0) returned 1 [0155.104] CloseHandle (hObject=0x344) returned 1 [0155.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0155.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0155.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.426] GetFileType (hFile=0x344) returned 0x1 [0155.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0155.426] GetFileType (hFile=0x344) returned 0x1 [0155.427] WriteFile (in: hFile=0x344, lpBuffer=0x28af0f0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28af0f0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0155.428] CloseHandle (hObject=0x344) returned 1 [0155.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0155.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0155.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.430] GetFileType (hFile=0x344) returned 0x1 [0155.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0155.430] GetFileType (hFile=0x344) returned 0x1 [0155.430] WriteFile (in: hFile=0x344, lpBuffer=0x128c4af0*, nNumberOfBytesToWrite=0x42410, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x128c4af0*, lpNumberOfBytesWritten=0x12dd18*=0x42410, lpOverlapped=0x0) returned 1 [0155.438] CloseHandle (hObject=0x344) returned 1 [0155.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0155.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0155.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0155.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0xa86a980, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0155.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0155.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.symmyware")) returned 1 [0155.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0155.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.441] GetFileType (hFile=0x344) returned 0x1 [0155.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.441] GetFileType (hFile=0x344) returned 0x1 [0155.442] WriteFile (in: hFile=0x344, lpBuffer=0x28b2720*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28b2720*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.444] CloseHandle (hObject=0x344) returned 1 [0155.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0155.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0155.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.445] GetFileType (hFile=0x344) returned 0x1 [0155.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0155.445] GetFileType (hFile=0x344) returned 0x1 [0155.446] WriteFile (in: hFile=0x344, lpBuffer=0x28b59a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28b59a8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.447] CloseHandle (hObject=0x344) returned 1 [0155.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0155.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0155.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.449] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.449] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.449] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0155.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0155.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0155.450] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0155.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0155.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.452] GetFileType (hFile=0x344) returned 0x1 [0155.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0155.452] GetFileType (hFile=0x344) returned 0x1 [0155.452] WriteFile (in: hFile=0x344, lpBuffer=0x28baa68*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28baa68*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.455] CloseHandle (hObject=0x344) returned 1 [0155.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0155.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0155.455] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0155.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0155.456] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0155.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0155.457] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0155.457] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0155.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0155.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.458] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0155.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0155.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0155.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0155.459] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.460] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0155.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0155.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.461] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.461] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.461] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0155.461] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0155.462] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.462] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0155.462] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0155.462] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.463] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.463] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.463] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0155.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0155.464] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0155.464] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3b [0155.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.491] GetFileType (hFile=0x344) returned 0x1 [0155.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.491] GetFileType (hFile=0x344) returned 0x1 [0155.492] WriteFile (in: hFile=0x344, lpBuffer=0x28c31e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28c31e0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.494] CloseHandle (hObject=0x344) returned 1 [0155.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0155.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0155.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.498] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.499] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0155.499] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0155.499] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0155.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0155.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0155.500] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.501] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0155.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0155.503] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0155.505] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0155.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0155.506] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0155.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0155.507] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0155.508] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0155.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.511] GetFileType (hFile=0x344) returned 0x1 [0155.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.511] GetFileType (hFile=0x344) returned 0x1 [0155.512] WriteFile (in: hFile=0x344, lpBuffer=0x28c9c40*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28c9c40*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.515] CloseHandle (hObject=0x344) returned 1 [0155.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0155.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0155.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.519] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0155.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0155.520] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0155.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0155.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0155.521] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0155.522] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.522] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0155.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0155.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.525] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.526] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0155.526] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0155.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0155.527] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0155.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0155.528] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0155.529] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0155.529] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0155.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0155.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0155.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0155.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.535] GetFileType (hFile=0x344) returned 0x1 [0155.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0155.536] GetFileType (hFile=0x344) returned 0x1 [0155.536] WriteFile (in: hFile=0x344, lpBuffer=0x28d05f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28d05f8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0155.539] CloseHandle (hObject=0x344) returned 1 [0155.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0155.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0155.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.540] GetFileType (hFile=0x344) returned 0x1 [0155.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0155.540] GetFileType (hFile=0x344) returned 0x1 [0155.542] WriteFile (in: hFile=0x344, lpBuffer=0x28d3880*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28d3880*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.543] CloseHandle (hObject=0x344) returned 1 [0155.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0155.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0155.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.545] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.545] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.545] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0155.545] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0155.546] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0155.546] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.546] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0155.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0155.547] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.547] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.548] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0155.549] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0155.549] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0155.550] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0155.552] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0155.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.577] GetFileType (hFile=0x344) returned 0x1 [0155.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.577] GetFileType (hFile=0x344) returned 0x1 [0155.577] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1e6 [0155.578] ReadFile (in: hFile=0x344, lpBuffer=0x28d7400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28d7400*, lpNumberOfBytesRead=0x12dd38*=0x1e6, lpOverlapped=0x0) returned 1 [0155.579] CloseHandle (hObject=0x344) returned 1 [0155.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0155.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0155.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.666] GetFileType (hFile=0x344) returned 0x1 [0155.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0155.666] GetFileType (hFile=0x344) returned 0x1 [0155.666] WriteFile (in: hFile=0x344, lpBuffer=0x2929298*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2929298*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0155.668] CloseHandle (hObject=0x344) returned 1 [0155.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0155.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.670] GetFileType (hFile=0x344) returned 0x1 [0155.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.670] GetFileType (hFile=0x344) returned 0x1 [0155.671] WriteFile (in: hFile=0x344, lpBuffer=0x292a3e0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x292a3e0*, lpNumberOfBytesWritten=0x12dc48*=0x1f0, lpOverlapped=0x0) returned 1 [0155.672] CloseHandle (hObject=0x344) returned 1 [0155.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0155.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x39 [0155.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa99ad0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0155.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0155.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.symmyware")) returned 1 [0155.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0155.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.676] GetFileType (hFile=0x344) returned 0x1 [0155.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.676] GetFileType (hFile=0x344) returned 0x1 [0155.677] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x3a1 [0155.677] ReadFile (in: hFile=0x344, lpBuffer=0x292bab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x292bab8*, lpNumberOfBytesRead=0x12dd38*=0x3a1, lpOverlapped=0x0) returned 1 [0155.679] CloseHandle (hObject=0x344) returned 1 [0155.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0155.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0155.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.705] GetFileType (hFile=0x344) returned 0x1 [0155.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0155.705] GetFileType (hFile=0x344) returned 0x1 [0155.705] WriteFile (in: hFile=0x344, lpBuffer=0x297e220*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x297e220*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0155.707] CloseHandle (hObject=0x344) returned 1 [0155.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0155.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.709] GetFileType (hFile=0x344) returned 0x1 [0155.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.709] GetFileType (hFile=0x344) returned 0x1 [0155.709] WriteFile (in: hFile=0x344, lpBuffer=0x297f378*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x297f378*, lpNumberOfBytesWritten=0x12dc48*=0x3b0, lpOverlapped=0x0) returned 1 [0155.711] CloseHandle (hObject=0x344) returned 1 [0155.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0155.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0155.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaaf1910, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0155.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0155.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.symmyware")) returned 1 [0155.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0155.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.716] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16b [0155.717] ReadFile (in: hFile=0x344, lpBuffer=0x2980830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2980830*, lpNumberOfBytesRead=0x12dd38*=0x16b, lpOverlapped=0x0) returned 1 [0155.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0155.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0155.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0155.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0155.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0155.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x3e [0155.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xab9c770, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0155.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0155.784] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.symmyware")) returned 1 [0155.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0155.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0155.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0155.818] WriteFile (in: hFile=0x344, lpBuffer=0x29d69a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x29d69a0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0155.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", lpFilePart=0x0) returned 0x2d [0155.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0155.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0155.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3a [0155.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0155.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.857] GetFileType (hFile=0x344) returned 0x1 [0155.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0155.857] GetFileType (hFile=0x344) returned 0x1 [0155.858] WriteFile (in: hFile=0x344, lpBuffer=0x26ed650*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x26ed650*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0155.860] CloseHandle (hObject=0x344) returned 1 [0155.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0155.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0155.860] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa335960, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.861] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa335960, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.862] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82875180, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0xc6196ed0, ftLastAccessTime.dwHighDateTime=0x1d5e14b, ftLastWriteTime.dwLowDateTime=0xc6196ed0, ftLastWriteTime.dwHighDateTime=0x1d5e14b, nFileSizeHigh=0x0, nFileSizeLow=0x16fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="7b1qnLZbWCYt1Rd83Kv.mp3", cAlternateFileName="7B1QNL~1.MP3")) returned 1 [0155.862] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3e1440, ftCreationTime.dwHighDateTime=0x1d5dca6, ftLastAccessTime.dwLowDateTime=0xd25f68b0, ftLastAccessTime.dwHighDateTime=0x1d5e1a1, ftLastWriteTime.dwLowDateTime=0xd25f68b0, ftLastWriteTime.dwHighDateTime=0x1d5e1a1, nFileSizeHigh=0x0, nFileSizeLow=0x9564, dwReserved0=0x0, dwReserved1=0x0, cFileName="bzUryByngFZ.wav", cAlternateFileName="BZURYB~1.WAV")) returned 1 [0155.863] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14db090, ftCreationTime.dwHighDateTime=0x1d5e111, ftLastAccessTime.dwLowDateTime=0x57f56b0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0x57f56b0, ftLastWriteTime.dwHighDateTime=0x1d5df40, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cerxv9n9mWpu2DaEue4I.m4a", cAlternateFileName="CERXV9~1.M4A")) returned 1 [0155.864] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D34u0jFI_lXn8mGef", cAlternateFileName="D34U0J~1")) returned 1 [0155.864] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.864] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="feI7sGNRDEhnpDkKw 4p", cAlternateFileName="FEI7SG~1")) returned 1 [0155.865] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa335960, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa33f5a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0155.865] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88936020, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xa3c450, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xa3c450, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x12629, dwReserved0=0x0, dwReserved1=0x0, cFileName="yZ05AHvAmp0M5FL.m4a", cAlternateFileName="YZ05AH~1.M4A")) returned 1 [0155.866] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zt5 gN5414XbN", cAlternateFileName="ZT5GN5~1")) returned 1 [0155.867] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zt5 gN5414XbN", cAlternateFileName="ZT5GN5~1")) returned 0 [0155.867] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0155.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0155.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0155.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa335960, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0155.869] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa335960, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82875180, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0xc6196ed0, ftLastAccessTime.dwHighDateTime=0x1d5e14b, ftLastWriteTime.dwLowDateTime=0xc6196ed0, ftLastWriteTime.dwHighDateTime=0x1d5e14b, nFileSizeHigh=0x0, nFileSizeLow=0x16fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="7b1qnLZbWCYt1Rd83Kv.mp3", cAlternateFileName="7B1QNL~1.MP3")) returned 1 [0155.870] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3e1440, ftCreationTime.dwHighDateTime=0x1d5dca6, ftLastAccessTime.dwLowDateTime=0xd25f68b0, ftLastAccessTime.dwHighDateTime=0x1d5e1a1, ftLastWriteTime.dwLowDateTime=0xd25f68b0, ftLastWriteTime.dwHighDateTime=0x1d5e1a1, nFileSizeHigh=0x0, nFileSizeLow=0x9564, dwReserved0=0x0, dwReserved1=0x0, cFileName="bzUryByngFZ.wav", cAlternateFileName="BZURYB~1.WAV")) returned 1 [0155.871] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14db090, ftCreationTime.dwHighDateTime=0x1d5e111, ftLastAccessTime.dwLowDateTime=0x57f56b0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0x57f56b0, ftLastWriteTime.dwHighDateTime=0x1d5df40, nFileSizeHigh=0x0, nFileSizeLow=0xdf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cerxv9n9mWpu2DaEue4I.m4a", cAlternateFileName="CERXV9~1.M4A")) returned 1 [0155.872] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D34u0jFI_lXn8mGef", cAlternateFileName="D34U0J~1")) returned 1 [0155.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0155.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="feI7sGNRDEhnpDkKw 4p", cAlternateFileName="FEI7SG~1")) returned 1 [0155.873] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa335960, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa335960, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa33f5a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0155.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88936020, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xa3c450, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xa3c450, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x12629, dwReserved0=0x0, dwReserved1=0x0, cFileName="yZ05AHvAmp0M5FL.m4a", cAlternateFileName="YZ05AH~1.M4A")) returned 1 [0155.874] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zt5 gN5414XbN", cAlternateFileName="ZT5GN5~1")) returned 1 [0155.875] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.875] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0155.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0155.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0155.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", lpFilePart=0x0) returned 0x3c [0155.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.877] GetFileType (hFile=0x344) returned 0x1 [0155.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.877] GetFileType (hFile=0x344) returned 0x1 [0155.877] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xdf7 [0155.878] ReadFile (in: hFile=0x344, lpBuffer=0x26f3260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26f3260*, lpNumberOfBytesRead=0x12dd38*=0xdf7, lpOverlapped=0x0) returned 1 [0155.879] CloseHandle (hObject=0x344) returned 1 [0155.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", lpFilePart=0x0) returned 0x3c [0155.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0155.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0155.973] GetFileType (hFile=0x344) returned 0x1 [0155.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0155.974] GetFileType (hFile=0x344) returned 0x1 [0155.974] WriteFile (in: hFile=0x344, lpBuffer=0x2748f70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2748f70*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0155.975] CloseHandle (hObject=0x344) returned 1 [0155.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", lpFilePart=0x0) returned 0x3c [0155.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.977] GetFileType (hFile=0x344) returned 0x1 [0155.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.977] GetFileType (hFile=0x344) returned 0x1 [0155.977] WriteFile (in: hFile=0x344, lpBuffer=0x274a0f8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x12dc48, lpOverlapped=0x0 | out: lpBuffer=0x274a0f8*, lpNumberOfBytesWritten=0x12dc48*=0xe00, lpOverlapped=0x0) returned 1 [0155.978] CloseHandle (hObject=0x344) returned 1 [0155.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a", lpFilePart=0x0) returned 0x3c [0155.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x46 [0155.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0155.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14db090, ftCreationTime.dwHighDateTime=0x1d5e111, ftLastAccessTime.dwLowDateTime=0x57f56b0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0xad517a0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0155.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0155.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Cerxv9n9mWpu2DaEue4I.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\cerxv9n9mwpu2daeue4i.m4a.symmyware")) returned 1 [0155.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", lpFilePart=0x0) returned 0x37 [0155.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0155.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0155.981] GetFileType (hFile=0x344) returned 0x1 [0155.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0155.981] GetFileType (hFile=0x344) returned 0x1 [0155.981] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x12629 [0155.981] ReadFile (in: hFile=0x344, lpBuffer=0x274b4c0, nNumberOfBytesToRead=0x12629, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x274b4c0*, lpNumberOfBytesRead=0x12dd38*=0x12629, lpOverlapped=0x0) returned 1 [0155.983] CloseHandle (hObject=0x344) returned 1 [0156.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", lpFilePart=0x0) returned 0x37 [0156.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0156.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.015] GetFileType (hFile=0x344) returned 0x1 [0156.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0156.016] GetFileType (hFile=0x344) returned 0x1 [0156.016] WriteFile (in: hFile=0x344, lpBuffer=0x27e5288*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x27e5288*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0156.017] CloseHandle (hObject=0x344) returned 1 [0156.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", lpFilePart=0x0) returned 0x37 [0156.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.019] GetFileType (hFile=0x344) returned 0x1 [0156.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0156.019] GetFileType (hFile=0x344) returned 0x1 [0156.019] WriteFile (in: hFile=0x344, lpBuffer=0x27d15f0*, nNumberOfBytesToWrite=0x12630, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27d15f0*, lpNumberOfBytesWritten=0x12dd98*=0x12630, lpOverlapped=0x0) returned 1 [0156.022] CloseHandle (hObject=0x344) returned 1 [0156.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a", lpFilePart=0x0) returned 0x37 [0156.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0156.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88936020, ftCreationTime.dwHighDateTime=0x1d5e37b, ftLastAccessTime.dwLowDateTime=0xa3c450, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xadba750, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x12630)) returned 1 [0156.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0156.023] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\yZ05AHvAmp0M5FL.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\yz05ahvamp0m5fl.m4a.symmyware")) returned 1 [0156.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef", lpFilePart=0x0) returned 0x35 [0156.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\", lpFilePart=0x0) returned 0x36 [0156.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.025] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc836cd0, ftCreationTime.dwHighDateTime=0x1d5e5a2, ftLastAccessTime.dwLowDateTime=0xad48f4f0, ftLastAccessTime.dwHighDateTime=0x1d5e3f5, ftLastWriteTime.dwLowDateTime=0xad48f4f0, ftLastWriteTime.dwHighDateTime=0x1d5e3f5, nFileSizeHigh=0x0, nFileSizeLow=0xd562, dwReserved0=0x0, dwReserved1=0x0, cFileName="2abMUKNQDP.wav", cAlternateFileName="2ABMUK~1.WAV")) returned 1 [0156.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b7bf60, ftCreationTime.dwHighDateTime=0x1d5da71, ftLastAccessTime.dwLowDateTime=0x8b649b40, ftLastAccessTime.dwHighDateTime=0x1d5de1a, ftLastWriteTime.dwLowDateTime=0x8b649b40, ftLastWriteTime.dwHighDateTime=0x1d5de1a, nFileSizeHigh=0x0, nFileSizeLow=0x5027, dwReserved0=0x0, dwReserved1=0x0, cFileName="5HGfZ.mp3", cAlternateFileName="")) returned 1 [0156.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHiIjM3l7RsIfAzNsp1Q", cAlternateFileName="DHIIJM~1")) returned 1 [0156.026] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07841a0, ftCreationTime.dwHighDateTime=0x1d5d7f6, ftLastAccessTime.dwLowDateTime=0x2916ea30, ftLastAccessTime.dwHighDateTime=0x1d5d8dc, ftLastWriteTime.dwLowDateTime=0x2916ea30, ftLastWriteTime.dwHighDateTime=0x1d5d8dc, nFileSizeHigh=0x0, nFileSizeLow=0x15813, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBKmbSNxIH8Nl9J3MpE1.wav", cAlternateFileName="EBKMBS~1.WAV")) returned 1 [0156.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd933b00, ftCreationTime.dwHighDateTime=0x1d5e76a, ftLastAccessTime.dwLowDateTime=0x994e170, ftLastAccessTime.dwHighDateTime=0x1d5e7b0, ftLastWriteTime.dwLowDateTime=0x994e170, ftLastWriteTime.dwHighDateTime=0x1d5e7b0, nFileSizeHigh=0x0, nFileSizeLow=0xe4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNNvUBRzfzf1Jg8R1rg.wav", cAlternateFileName="SNNVUB~1.WAV")) returned 1 [0156.027] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.028] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef", lpFilePart=0x0) returned 0x35 [0156.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\", lpFilePart=0x0) returned 0x36 [0156.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26481350, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xe1d3b7e0, ftLastAccessTime.dwHighDateTime=0x1d5d91f, ftLastWriteTime.dwLowDateTime=0xe1d3b7e0, ftLastWriteTime.dwHighDateTime=0x1d5d91f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc836cd0, ftCreationTime.dwHighDateTime=0x1d5e5a2, ftLastAccessTime.dwLowDateTime=0xad48f4f0, ftLastAccessTime.dwHighDateTime=0x1d5e3f5, ftLastWriteTime.dwLowDateTime=0xad48f4f0, ftLastWriteTime.dwHighDateTime=0x1d5e3f5, nFileSizeHigh=0x0, nFileSizeLow=0xd562, dwReserved0=0x0, dwReserved1=0x0, cFileName="2abMUKNQDP.wav", cAlternateFileName="2ABMUK~1.WAV")) returned 1 [0156.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b7bf60, ftCreationTime.dwHighDateTime=0x1d5da71, ftLastAccessTime.dwLowDateTime=0x8b649b40, ftLastAccessTime.dwHighDateTime=0x1d5de1a, ftLastWriteTime.dwLowDateTime=0x8b649b40, ftLastWriteTime.dwHighDateTime=0x1d5de1a, nFileSizeHigh=0x0, nFileSizeLow=0x5027, dwReserved0=0x0, dwReserved1=0x0, cFileName="5HGfZ.mp3", cAlternateFileName="")) returned 1 [0156.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHiIjM3l7RsIfAzNsp1Q", cAlternateFileName="DHIIJM~1")) returned 1 [0156.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07841a0, ftCreationTime.dwHighDateTime=0x1d5d7f6, ftLastAccessTime.dwLowDateTime=0x2916ea30, ftLastAccessTime.dwHighDateTime=0x1d5d8dc, ftLastWriteTime.dwLowDateTime=0x2916ea30, ftLastWriteTime.dwHighDateTime=0x1d5d8dc, nFileSizeHigh=0x0, nFileSizeLow=0x15813, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBKmbSNxIH8Nl9J3MpE1.wav", cAlternateFileName="EBKMBS~1.WAV")) returned 1 [0156.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd933b00, ftCreationTime.dwHighDateTime=0x1d5e76a, ftLastAccessTime.dwLowDateTime=0x994e170, ftLastAccessTime.dwHighDateTime=0x1d5e7b0, ftLastWriteTime.dwLowDateTime=0x994e170, ftLastWriteTime.dwHighDateTime=0x1d5e7b0, nFileSizeHigh=0x0, nFileSizeLow=0xe4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNNvUBRzfzf1Jg8R1rg.wav", cAlternateFileName="SNNVUB~1.WAV")) returned 1 [0156.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd933b00, ftCreationTime.dwHighDateTime=0x1d5e76a, ftLastAccessTime.dwLowDateTime=0x994e170, ftLastAccessTime.dwHighDateTime=0x1d5e7b0, ftLastWriteTime.dwLowDateTime=0x994e170, ftLastWriteTime.dwHighDateTime=0x1d5e7b0, nFileSizeHigh=0x0, nFileSizeLow=0xe4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sNNvUBRzfzf1Jg8R1rg.wav", cAlternateFileName="SNNVUB~1.WAV")) returned 0 [0156.032] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0156.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q", lpFilePart=0x0) returned 0x4a [0156.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\", lpFilePart=0x0) returned 0x4b [0156.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532a240, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x19b55fb0, ftLastAccessTime.dwHighDateTime=0x1d5dc7c, ftLastWriteTime.dwLowDateTime=0x19b55fb0, ftLastWriteTime.dwHighDateTime=0x1d5dc7c, nFileSizeHigh=0x0, nFileSizeLow=0xbefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="3X9Y.m4a", cAlternateFileName="")) returned 1 [0156.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6b6a0, ftCreationTime.dwHighDateTime=0x1d5dcca, ftLastAccessTime.dwLowDateTime=0x535760c0, ftLastAccessTime.dwHighDateTime=0x1d5df0a, ftLastWriteTime.dwLowDateTime=0x535760c0, ftLastWriteTime.dwHighDateTime=0x1d5df0a, nFileSizeHigh=0x0, nFileSizeLow=0x16c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ezFks_kRvIt2rSw_6G.m4a", cAlternateFileName="EZFKS_~1.M4A")) returned 1 [0156.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b92160, ftCreationTime.dwHighDateTime=0x1d5e223, ftLastAccessTime.dwLowDateTime=0xe590e4b0, ftLastAccessTime.dwHighDateTime=0x1d5e609, ftLastWriteTime.dwLowDateTime=0xe590e4b0, ftLastWriteTime.dwHighDateTime=0x1d5e609, nFileSizeHigh=0x0, nFileSizeLow=0xf4c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGbI.wav", cAlternateFileName="")) returned 1 [0156.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280a63f0, ftCreationTime.dwHighDateTime=0x1d5e7c9, ftLastAccessTime.dwLowDateTime=0xb4fc44e0, ftLastAccessTime.dwHighDateTime=0x1d5e26a, ftLastWriteTime.dwLowDateTime=0xb4fc44e0, ftLastWriteTime.dwHighDateTime=0x1d5e26a, nFileSizeHigh=0x0, nFileSizeLow=0xdad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktHcEoOCBjS.mp3", cAlternateFileName="KTHCEO~1.MP3")) returned 1 [0156.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa9020, ftCreationTime.dwHighDateTime=0x1d5e357, ftLastAccessTime.dwLowDateTime=0xc6969110, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0xc6969110, ftLastWriteTime.dwHighDateTime=0x1d5e12a, nFileSizeHigh=0x0, nFileSizeLow=0x452e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ljBLxinJLBwfMiHIJU9a.mp3", cAlternateFileName="LJBLXI~1.MP3")) returned 1 [0156.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a5df0, ftCreationTime.dwHighDateTime=0x1d5dcd1, ftLastAccessTime.dwLowDateTime=0x9dee2e50, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x9dee2e50, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x7321, dwReserved0=0x0, dwReserved1=0x0, cFileName="p32f.wav", cAlternateFileName="")) returned 1 [0156.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJr3v0fjWg9sA", cAlternateFileName="PJR3V0~1")) returned 1 [0156.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cfeae0, ftCreationTime.dwHighDateTime=0x1d5e694, ftLastAccessTime.dwLowDateTime=0xe6d8ec90, ftLastAccessTime.dwHighDateTime=0x1d5e04c, ftLastWriteTime.dwLowDateTime=0xe6d8ec90, ftLastWriteTime.dwHighDateTime=0x1d5e04c, nFileSizeHigh=0x0, nFileSizeLow=0xd69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="s287.m4a", cAlternateFileName="")) returned 1 [0156.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOfL-rK0l1GpOx55GX", cAlternateFileName="SOFL-R~1")) returned 1 [0156.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5436c270, ftCreationTime.dwHighDateTime=0x1d5da63, ftLastAccessTime.dwLowDateTime=0x4c187eb0, ftLastAccessTime.dwHighDateTime=0x1d5de3e, ftLastWriteTime.dwLowDateTime=0x4c187eb0, ftLastWriteTime.dwHighDateTime=0x1d5de3e, nFileSizeHigh=0x0, nFileSizeLow=0xf5be, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3buxtu.wav", cAlternateFileName="")) returned 1 [0156.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yF_slyfRRmyhODOTz9Z", cAlternateFileName="YF_SLY~1")) returned 1 [0156.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yF_slyfRRmyhODOTz9Z", cAlternateFileName="YF_SLY~1")) returned 0 [0156.039] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0156.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0156.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0156.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q", lpFilePart=0x0) returned 0x4a [0156.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\", lpFilePart=0x0) returned 0x4b [0156.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe64d8460, ftCreationTime.dwHighDateTime=0x1d5e54d, ftLastAccessTime.dwLowDateTime=0xd3dee010, ftLastAccessTime.dwHighDateTime=0x1d5e770, ftLastWriteTime.dwLowDateTime=0xd3dee010, ftLastWriteTime.dwHighDateTime=0x1d5e770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.040] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532a240, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x19b55fb0, ftLastAccessTime.dwHighDateTime=0x1d5dc7c, ftLastWriteTime.dwLowDateTime=0x19b55fb0, ftLastWriteTime.dwHighDateTime=0x1d5dc7c, nFileSizeHigh=0x0, nFileSizeLow=0xbefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="3X9Y.m4a", cAlternateFileName="")) returned 1 [0156.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6b6a0, ftCreationTime.dwHighDateTime=0x1d5dcca, ftLastAccessTime.dwLowDateTime=0x535760c0, ftLastAccessTime.dwHighDateTime=0x1d5df0a, ftLastWriteTime.dwLowDateTime=0x535760c0, ftLastWriteTime.dwHighDateTime=0x1d5df0a, nFileSizeHigh=0x0, nFileSizeLow=0x16c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ezFks_kRvIt2rSw_6G.m4a", cAlternateFileName="EZFKS_~1.M4A")) returned 1 [0156.041] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b92160, ftCreationTime.dwHighDateTime=0x1d5e223, ftLastAccessTime.dwLowDateTime=0xe590e4b0, ftLastAccessTime.dwHighDateTime=0x1d5e609, ftLastWriteTime.dwLowDateTime=0xe590e4b0, ftLastWriteTime.dwHighDateTime=0x1d5e609, nFileSizeHigh=0x0, nFileSizeLow=0xf4c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGbI.wav", cAlternateFileName="")) returned 1 [0156.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x280a63f0, ftCreationTime.dwHighDateTime=0x1d5e7c9, ftLastAccessTime.dwLowDateTime=0xb4fc44e0, ftLastAccessTime.dwHighDateTime=0x1d5e26a, ftLastWriteTime.dwLowDateTime=0xb4fc44e0, ftLastWriteTime.dwHighDateTime=0x1d5e26a, nFileSizeHigh=0x0, nFileSizeLow=0xdad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktHcEoOCBjS.mp3", cAlternateFileName="KTHCEO~1.MP3")) returned 1 [0156.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa9020, ftCreationTime.dwHighDateTime=0x1d5e357, ftLastAccessTime.dwLowDateTime=0xc6969110, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0xc6969110, ftLastWriteTime.dwHighDateTime=0x1d5e12a, nFileSizeHigh=0x0, nFileSizeLow=0x452e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ljBLxinJLBwfMiHIJU9a.mp3", cAlternateFileName="LJBLXI~1.MP3")) returned 1 [0156.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a5df0, ftCreationTime.dwHighDateTime=0x1d5dcd1, ftLastAccessTime.dwLowDateTime=0x9dee2e50, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x9dee2e50, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x7321, dwReserved0=0x0, dwReserved1=0x0, cFileName="p32f.wav", cAlternateFileName="")) returned 1 [0156.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pJr3v0fjWg9sA", cAlternateFileName="PJR3V0~1")) returned 1 [0156.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cfeae0, ftCreationTime.dwHighDateTime=0x1d5e694, ftLastAccessTime.dwLowDateTime=0xe6d8ec90, ftLastAccessTime.dwHighDateTime=0x1d5e04c, ftLastWriteTime.dwLowDateTime=0xe6d8ec90, ftLastWriteTime.dwHighDateTime=0x1d5e04c, nFileSizeHigh=0x0, nFileSizeLow=0xd69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="s287.m4a", cAlternateFileName="")) returned 1 [0156.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOfL-rK0l1GpOx55GX", cAlternateFileName="SOFL-R~1")) returned 1 [0156.046] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5436c270, ftCreationTime.dwHighDateTime=0x1d5da63, ftLastAccessTime.dwLowDateTime=0x4c187eb0, ftLastAccessTime.dwHighDateTime=0x1d5de3e, ftLastWriteTime.dwLowDateTime=0x4c187eb0, ftLastWriteTime.dwHighDateTime=0x1d5de3e, nFileSizeHigh=0x0, nFileSizeLow=0xf5be, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3buxtu.wav", cAlternateFileName="")) returned 1 [0156.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yF_slyfRRmyhODOTz9Z", cAlternateFileName="YF_SLY~1")) returned 1 [0156.047] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.048] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0156.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0156.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", lpFilePart=0x0) returned 0x53 [0156.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.049] GetFileType (hFile=0x344) returned 0x1 [0156.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.049] GetFileType (hFile=0x344) returned 0x1 [0156.049] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xbefb [0156.049] ReadFile (in: hFile=0x344, lpBuffer=0x27ef040, nNumberOfBytesToRead=0xbefb, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27ef040*, lpNumberOfBytesRead=0x12dc38*=0xbefb, lpOverlapped=0x0) returned 1 [0156.051] CloseHandle (hObject=0x344) returned 1 [0156.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", lpFilePart=0x0) returned 0x53 [0156.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0156.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.222] GetFileType (hFile=0x344) returned 0x1 [0156.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0156.222] GetFileType (hFile=0x344) returned 0x1 [0156.222] WriteFile (in: hFile=0x344, lpBuffer=0x286f170*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x286f170*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0156.223] CloseHandle (hObject=0x344) returned 1 [0156.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", lpFilePart=0x0) returned 0x53 [0156.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.225] GetFileType (hFile=0x344) returned 0x1 [0156.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.225] GetFileType (hFile=0x344) returned 0x1 [0156.225] WriteFile (in: hFile=0x344, lpBuffer=0x2861be0*, nNumberOfBytesToWrite=0xbf00, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x2861be0*, lpNumberOfBytesWritten=0x12dc98*=0xbf00, lpOverlapped=0x0) returned 1 [0156.227] CloseHandle (hObject=0x344) returned 1 [0156.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a", lpFilePart=0x0) returned 0x53 [0156.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x5d [0156.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532a240, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x19b55fb0, ftLastAccessTime.dwHighDateTime=0x1d5dc7c, ftLastWriteTime.dwLowDateTime=0xaf85710, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbf00)) returned 1 [0156.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0156.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\3X9Y.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\3x9y.m4a.symmyware")) returned 1 [0156.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", lpFilePart=0x0) returned 0x61 [0156.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.229] GetFileType (hFile=0x344) returned 0x1 [0156.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.229] GetFileType (hFile=0x344) returned 0x1 [0156.229] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x16c9e [0156.230] ReadFile (in: hFile=0x344, lpBuffer=0x129439c8, nNumberOfBytesToRead=0x16c9e, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x129439c8*, lpNumberOfBytesRead=0x12dc38*=0x16c9e, lpOverlapped=0x0) returned 1 [0156.233] CloseHandle (hObject=0x344) returned 1 [0156.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", lpFilePart=0x0) returned 0x61 [0156.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0156.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.267] GetFileType (hFile=0x344) returned 0x1 [0156.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0156.267] GetFileType (hFile=0x344) returned 0x1 [0156.267] WriteFile (in: hFile=0x344, lpBuffer=0x28c0c70*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x28c0c70*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0156.268] CloseHandle (hObject=0x344) returned 1 [0156.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", lpFilePart=0x0) returned 0x61 [0156.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.270] GetFileType (hFile=0x344) returned 0x1 [0156.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.270] GetFileType (hFile=0x344) returned 0x1 [0156.270] WriteFile (in: hFile=0x344, lpBuffer=0x129b5988*, nNumberOfBytesToWrite=0x16ca0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x129b5988*, lpNumberOfBytesWritten=0x12dc98*=0x16ca0, lpOverlapped=0x0) returned 1 [0156.273] CloseHandle (hObject=0x344) returned 1 [0156.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a", lpFilePart=0x0) returned 0x61 [0156.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x6b [0156.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6b6a0, ftCreationTime.dwHighDateTime=0x1d5dcca, ftLastAccessTime.dwLowDateTime=0x535760c0, ftLastAccessTime.dwHighDateTime=0x1d5df0a, ftLastWriteTime.dwLowDateTime=0xafee6c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x16ca0)) returned 1 [0156.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0156.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\ezFks_kRvIt2rSw_6G.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\ezfks_krvit2rsw_6g.m4a.symmyware")) returned 1 [0156.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", lpFilePart=0x0) returned 0x53 [0156.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.275] GetFileType (hFile=0x344) returned 0x1 [0156.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.276] GetFileType (hFile=0x344) returned 0x1 [0156.276] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xd69b [0156.276] ReadFile (in: hFile=0x344, lpBuffer=0x28c2338, nNumberOfBytesToRead=0xd69b, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28c2338*, lpNumberOfBytesRead=0x12dc38*=0xd69b, lpOverlapped=0x0) returned 1 [0156.278] CloseHandle (hObject=0x344) returned 1 [0156.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", lpFilePart=0x0) returned 0x53 [0156.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0156.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.367] GetFileType (hFile=0x344) returned 0x1 [0156.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0156.368] GetFileType (hFile=0x344) returned 0x1 [0156.368] WriteFile (in: hFile=0x344, lpBuffer=0x2756eb8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2756eb8*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0156.370] CloseHandle (hObject=0x344) returned 1 [0156.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", lpFilePart=0x0) returned 0x53 [0156.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0156.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.371] GetFileType (hFile=0x344) returned 0x1 [0156.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0156.372] GetFileType (hFile=0x344) returned 0x1 [0156.372] WriteFile (in: hFile=0x344, lpBuffer=0x2748188*, nNumberOfBytesToWrite=0xd6a0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x2748188*, lpNumberOfBytesWritten=0x12dc98*=0xd6a0, lpOverlapped=0x0) returned 1 [0156.374] CloseHandle (hObject=0x344) returned 1 [0156.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a", lpFilePart=0x0) returned 0x53 [0156.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x5d [0156.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cfeae0, ftCreationTime.dwHighDateTime=0x1d5e694, ftLastAccessTime.dwLowDateTime=0xe6d8ec90, ftLastAccessTime.dwHighDateTime=0x1d5e04c, ftLastWriteTime.dwLowDateTime=0xb0d65b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd6a0)) returned 1 [0156.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0156.375] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\s287.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\s287.m4a.symmyware")) returned 1 [0156.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA", lpFilePart=0x0) returned 0x58 [0156.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\", lpFilePart=0x0) returned 0x59 [0156.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd0ae70, ftCreationTime.dwHighDateTime=0x1d5d84f, ftLastAccessTime.dwLowDateTime=0x94d0ac30, ftLastAccessTime.dwHighDateTime=0x1d5dce6, ftLastWriteTime.dwLowDateTime=0x94d0ac30, ftLastWriteTime.dwHighDateTime=0x1d5dce6, nFileSizeHigh=0x0, nFileSizeLow=0x1575e, dwReserved0=0x0, dwReserved1=0x0, cFileName="8f68lwSQx0JZs.m4a", cAlternateFileName="8F68LW~1.M4A")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40239bb0, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0xc4757800, ftLastAccessTime.dwHighDateTime=0x1d5e45a, ftLastWriteTime.dwLowDateTime=0xc4757800, ftLastWriteTime.dwHighDateTime=0x1d5e45a, nFileSizeHigh=0x0, nFileSizeLow=0x16920, dwReserved0=0x0, dwReserved1=0x0, cFileName="PqbOp3et6sRBe87-71l.mp3", cAlternateFileName="PQBOP3~1.MP3")) returned 1 [0156.377] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb65be00, ftCreationTime.dwHighDateTime=0x1d5d7dd, ftLastAccessTime.dwLowDateTime=0x6e95e130, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x6e95e130, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x11653, dwReserved0=0x0, dwReserved1=0x0, cFileName="YeX_.mp3", cAlternateFileName="")) returned 1 [0156.378] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.378] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA", lpFilePart=0x0) returned 0x58 [0156.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\", lpFilePart=0x0) returned 0x59 [0156.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9713a3a0, ftCreationTime.dwHighDateTime=0x1d5dd70, ftLastAccessTime.dwLowDateTime=0x7f39f300, ftLastAccessTime.dwHighDateTime=0x1d5d85d, ftLastWriteTime.dwLowDateTime=0x7f39f300, ftLastWriteTime.dwHighDateTime=0x1d5d85d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd0ae70, ftCreationTime.dwHighDateTime=0x1d5d84f, ftLastAccessTime.dwLowDateTime=0x94d0ac30, ftLastAccessTime.dwHighDateTime=0x1d5dce6, ftLastWriteTime.dwLowDateTime=0x94d0ac30, ftLastWriteTime.dwHighDateTime=0x1d5dce6, nFileSizeHigh=0x0, nFileSizeLow=0x1575e, dwReserved0=0x0, dwReserved1=0x0, cFileName="8f68lwSQx0JZs.m4a", cAlternateFileName="8F68LW~1.M4A")) returned 1 [0156.379] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40239bb0, ftCreationTime.dwHighDateTime=0x1d5dc1f, ftLastAccessTime.dwLowDateTime=0xc4757800, ftLastAccessTime.dwHighDateTime=0x1d5e45a, ftLastWriteTime.dwLowDateTime=0xc4757800, ftLastWriteTime.dwHighDateTime=0x1d5e45a, nFileSizeHigh=0x0, nFileSizeLow=0x16920, dwReserved0=0x0, dwReserved1=0x0, cFileName="PqbOp3et6sRBe87-71l.mp3", cAlternateFileName="PQBOP3~1.MP3")) returned 1 [0156.380] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb65be00, ftCreationTime.dwHighDateTime=0x1d5d7dd, ftLastAccessTime.dwLowDateTime=0x6e95e130, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x6e95e130, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x11653, dwReserved0=0x0, dwReserved1=0x0, cFileName="YeX_.mp3", cAlternateFileName="")) returned 1 [0156.380] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb65be00, ftCreationTime.dwHighDateTime=0x1d5d7dd, ftLastAccessTime.dwLowDateTime=0x6e95e130, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x6e95e130, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x11653, dwReserved0=0x0, dwReserved1=0x0, cFileName="YeX_.mp3", cAlternateFileName="")) returned 0 [0156.380] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", lpFilePart=0x0) returned 0x6a [0156.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.381] GetFileType (hFile=0x344) returned 0x1 [0156.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.381] GetFileType (hFile=0x344) returned 0x1 [0156.381] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x1575e [0156.421] ReadFile (in: hFile=0x344, lpBuffer=0x126d21a0, nNumberOfBytesToRead=0x1575e, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesRead=0x12dbb8*=0x1575e, lpOverlapped=0x0) returned 1 [0156.424] CloseHandle (hObject=0x344) returned 1 [0156.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", lpFilePart=0x0) returned 0x6a [0156.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0156.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.572] GetFileType (hFile=0x344) returned 0x1 [0156.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0156.572] GetFileType (hFile=0x344) returned 0x1 [0156.573] WriteFile (in: hFile=0x344, lpBuffer=0x27148a8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x27148a8*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0156.575] CloseHandle (hObject=0x344) returned 1 [0156.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", lpFilePart=0x0) returned 0x6a [0156.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.577] GetFileType (hFile=0x344) returned 0x1 [0156.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.577] GetFileType (hFile=0x344) returned 0x1 [0156.577] WriteFile (in: hFile=0x344, lpBuffer=0x1273d720*, nNumberOfBytesToWrite=0x15760, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x1273d720*, lpNumberOfBytesWritten=0x12dc18*=0x15760, lpOverlapped=0x0) returned 1 [0156.580] CloseHandle (hObject=0x344) returned 1 [0156.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a", lpFilePart=0x0) returned 0x6a [0156.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x74 [0156.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedd0ae70, ftCreationTime.dwHighDateTime=0x1d5d84f, ftLastAccessTime.dwLowDateTime=0x94d0ac30, ftLastAccessTime.dwHighDateTime=0x1d5dce6, ftLastWriteTime.dwLowDateTime=0xb297930, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15760)) returned 1 [0156.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0156.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\8f68lwSQx0JZs.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\8f68lwsqx0jzs.m4a.symmyware")) returned 1 [0156.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0156.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0156.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\pJr3v0fjWg9sA\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\pjr3v0fjwg9sa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.584] GetFileType (hFile=0x344) returned 0x1 [0156.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0156.584] GetFileType (hFile=0x344) returned 0x1 [0156.585] WriteFile (in: hFile=0x344, lpBuffer=0x27180a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27180a0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0156.586] CloseHandle (hObject=0x344) returned 1 [0156.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX", lpFilePart=0x0) returned 0x5d [0156.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\", lpFilePart=0x0) returned 0x5e [0156.587] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.588] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf763190, ftCreationTime.dwHighDateTime=0x1d5df89, ftLastAccessTime.dwLowDateTime=0x5e2339f0, ftLastAccessTime.dwHighDateTime=0x1d5d85e, ftLastWriteTime.dwLowDateTime=0x5e2339f0, ftLastWriteTime.dwHighDateTime=0x1d5d85e, nFileSizeHigh=0x0, nFileSizeLow=0xb0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEMPqs3w8ZZJ9p.wav", cAlternateFileName="DEMPQS~1.WAV")) returned 1 [0156.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b04360, ftCreationTime.dwHighDateTime=0x1d5e5ec, ftLastAccessTime.dwLowDateTime=0xaa5ea670, ftLastAccessTime.dwHighDateTime=0x1d5dcc7, ftLastWriteTime.dwLowDateTime=0xaa5ea670, ftLastWriteTime.dwHighDateTime=0x1d5dcc7, nFileSizeHigh=0x0, nFileSizeLow=0x1541f, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPYakpqZHOFfo.mp3", cAlternateFileName="JPYAKP~1.MP3")) returned 1 [0156.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197d3060, ftCreationTime.dwHighDateTime=0x1d5e7fb, ftLastAccessTime.dwLowDateTime=0x8b7ffc50, ftLastAccessTime.dwHighDateTime=0x1d5e63a, ftLastWriteTime.dwLowDateTime=0x8b7ffc50, ftLastWriteTime.dwHighDateTime=0x1d5e63a, nFileSizeHigh=0x0, nFileSizeLow=0x7acb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jSnp120Xsiukw Nr7wH.wav", cAlternateFileName="JSNP12~1.WAV")) returned 1 [0156.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d459e80, ftCreationTime.dwHighDateTime=0x1d5dc1e, ftLastAccessTime.dwLowDateTime=0x78299f00, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x78299f00, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x12570, dwReserved0=0x0, dwReserved1=0x0, cFileName="XkvfytBY.m4a", cAlternateFileName="")) returned 1 [0156.589] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db3e7f0, ftCreationTime.dwHighDateTime=0x1d5e160, ftLastAccessTime.dwLowDateTime=0x75926a40, ftLastAccessTime.dwHighDateTime=0x1d5e356, ftLastWriteTime.dwLowDateTime=0x75926a40, ftLastWriteTime.dwHighDateTime=0x1d5e356, nFileSizeHigh=0x0, nFileSizeLow=0xc392, dwReserved0=0x0, dwReserved1=0x0, cFileName="zera.m4a", cAlternateFileName="")) returned 1 [0156.590] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.590] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX", lpFilePart=0x0) returned 0x5d [0156.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\", lpFilePart=0x0) returned 0x5e [0156.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.591] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27453a10, ftCreationTime.dwHighDateTime=0x1d5d871, ftLastAccessTime.dwLowDateTime=0x9f0f6d40, ftLastAccessTime.dwHighDateTime=0x1d5e343, ftLastWriteTime.dwLowDateTime=0x9f0f6d40, ftLastWriteTime.dwHighDateTime=0x1d5e343, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf763190, ftCreationTime.dwHighDateTime=0x1d5df89, ftLastAccessTime.dwLowDateTime=0x5e2339f0, ftLastAccessTime.dwHighDateTime=0x1d5d85e, ftLastWriteTime.dwLowDateTime=0x5e2339f0, ftLastWriteTime.dwHighDateTime=0x1d5d85e, nFileSizeHigh=0x0, nFileSizeLow=0xb0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEMPqs3w8ZZJ9p.wav", cAlternateFileName="DEMPQS~1.WAV")) returned 1 [0156.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b04360, ftCreationTime.dwHighDateTime=0x1d5e5ec, ftLastAccessTime.dwLowDateTime=0xaa5ea670, ftLastAccessTime.dwHighDateTime=0x1d5dcc7, ftLastWriteTime.dwLowDateTime=0xaa5ea670, ftLastWriteTime.dwHighDateTime=0x1d5dcc7, nFileSizeHigh=0x0, nFileSizeLow=0x1541f, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPYakpqZHOFfo.mp3", cAlternateFileName="JPYAKP~1.MP3")) returned 1 [0156.592] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197d3060, ftCreationTime.dwHighDateTime=0x1d5e7fb, ftLastAccessTime.dwLowDateTime=0x8b7ffc50, ftLastAccessTime.dwHighDateTime=0x1d5e63a, ftLastWriteTime.dwLowDateTime=0x8b7ffc50, ftLastWriteTime.dwHighDateTime=0x1d5e63a, nFileSizeHigh=0x0, nFileSizeLow=0x7acb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jSnp120Xsiukw Nr7wH.wav", cAlternateFileName="JSNP12~1.WAV")) returned 1 [0156.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d459e80, ftCreationTime.dwHighDateTime=0x1d5dc1e, ftLastAccessTime.dwLowDateTime=0x78299f00, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x78299f00, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x12570, dwReserved0=0x0, dwReserved1=0x0, cFileName="XkvfytBY.m4a", cAlternateFileName="")) returned 1 [0156.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db3e7f0, ftCreationTime.dwHighDateTime=0x1d5e160, ftLastAccessTime.dwLowDateTime=0x75926a40, ftLastAccessTime.dwHighDateTime=0x1d5e356, ftLastWriteTime.dwLowDateTime=0x75926a40, ftLastWriteTime.dwHighDateTime=0x1d5e356, nFileSizeHigh=0x0, nFileSizeLow=0xc392, dwReserved0=0x0, dwReserved1=0x0, cFileName="zera.m4a", cAlternateFileName="")) returned 1 [0156.593] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db3e7f0, ftCreationTime.dwHighDateTime=0x1d5e160, ftLastAccessTime.dwLowDateTime=0x75926a40, ftLastAccessTime.dwHighDateTime=0x1d5e356, ftLastWriteTime.dwLowDateTime=0x75926a40, ftLastWriteTime.dwHighDateTime=0x1d5e356, nFileSizeHigh=0x0, nFileSizeLow=0xc392, dwReserved0=0x0, dwReserved1=0x0, cFileName="zera.m4a", cAlternateFileName="")) returned 0 [0156.594] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", lpFilePart=0x0) returned 0x6a [0156.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.594] GetFileType (hFile=0x344) returned 0x1 [0156.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.594] GetFileType (hFile=0x344) returned 0x1 [0156.595] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x12570 [0156.595] ReadFile (in: hFile=0x344, lpBuffer=0x271d3e8, nNumberOfBytesToRead=0x12570, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x271d3e8*, lpNumberOfBytesRead=0x12dbb8*=0x12570, lpOverlapped=0x0) returned 1 [0156.598] CloseHandle (hObject=0x344) returned 1 [0156.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", lpFilePart=0x0) returned 0x6a [0156.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0156.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.665] GetFileType (hFile=0x344) returned 0x1 [0156.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0156.665] GetFileType (hFile=0x344) returned 0x1 [0156.665] WriteFile (in: hFile=0x344, lpBuffer=0x27b6f48*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x27b6f48*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0156.666] CloseHandle (hObject=0x344) returned 1 [0156.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", lpFilePart=0x0) returned 0x6a [0156.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.670] GetFileType (hFile=0x344) returned 0x1 [0156.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.670] GetFileType (hFile=0x344) returned 0x1 [0156.670] WriteFile (in: hFile=0x344, lpBuffer=0x27a3300*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x27a3300*, lpNumberOfBytesWritten=0x12dc18*=0x12580, lpOverlapped=0x0) returned 1 [0156.673] CloseHandle (hObject=0x344) returned 1 [0156.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a", lpFilePart=0x0) returned 0x6a [0156.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x74 [0156.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d459e80, ftCreationTime.dwHighDateTime=0x1d5dc1e, ftLastAccessTime.dwLowDateTime=0x78299f00, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0xb36bfa0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x12580)) returned 1 [0156.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0156.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\XkvfytBY.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\xkvfytby.m4a.symmyware")) returned 1 [0156.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", lpFilePart=0x0) returned 0x66 [0156.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.676] GetFileType (hFile=0x344) returned 0x1 [0156.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.676] GetFileType (hFile=0x344) returned 0x1 [0156.676] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xc392 [0156.676] ReadFile (in: hFile=0x344, lpBuffer=0x27b85d8, nNumberOfBytesToRead=0xc392, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27b85d8*, lpNumberOfBytesRead=0x12dbb8*=0xc392, lpOverlapped=0x0) returned 1 [0156.678] CloseHandle (hObject=0x344) returned 1 [0156.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", lpFilePart=0x0) returned 0x66 [0156.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0156.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.694] GetFileType (hFile=0x344) returned 0x1 [0156.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0156.694] GetFileType (hFile=0x344) returned 0x1 [0156.695] WriteFile (in: hFile=0x344, lpBuffer=0x28399b0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x28399b0*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0156.696] CloseHandle (hObject=0x344) returned 1 [0156.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", lpFilePart=0x0) returned 0x66 [0156.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.698] GetFileType (hFile=0x344) returned 0x1 [0156.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.698] GetFileType (hFile=0x344) returned 0x1 [0156.698] WriteFile (in: hFile=0x344, lpBuffer=0x282bf58*, nNumberOfBytesToWrite=0xc3a0, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x282bf58*, lpNumberOfBytesWritten=0x12dc18*=0xc3a0, lpOverlapped=0x0) returned 1 [0156.700] CloseHandle (hObject=0x344) returned 1 [0156.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a", lpFilePart=0x0) returned 0x66 [0156.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x70 [0156.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db3e7f0, ftCreationTime.dwHighDateTime=0x1d5e160, ftLastAccessTime.dwLowDateTime=0x75926a40, ftLastAccessTime.dwHighDateTime=0x1d5e356, ftLastWriteTime.dwLowDateTime=0xb3a9030, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc3a0)) returned 1 [0156.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0156.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\zera.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\zera.m4a.symmyware")) returned 1 [0156.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0156.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0156.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\sOfL-rK0l1GpOx55GX\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\sofl-rk0l1gpox55gx\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.704] GetFileType (hFile=0x344) returned 0x1 [0156.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0156.704] GetFileType (hFile=0x344) returned 0x1 [0156.704] WriteFile (in: hFile=0x344, lpBuffer=0x283d138*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x283d138*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0156.706] CloseHandle (hObject=0x344) returned 1 [0156.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z", lpFilePart=0x0) returned 0x5e [0156.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\", lpFilePart=0x0) returned 0x5f [0156.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe65360, ftCreationTime.dwHighDateTime=0x1d5db07, ftLastAccessTime.dwLowDateTime=0x4a70eeb0, ftLastAccessTime.dwHighDateTime=0x1d5dcc9, ftLastWriteTime.dwLowDateTime=0x4a70eeb0, ftLastWriteTime.dwHighDateTime=0x1d5dcc9, nFileSizeHigh=0x0, nFileSizeLow=0xe2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5di _gjI1.m4a", cAlternateFileName="5DI_GJ~1.M4A")) returned 1 [0156.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6037ee0, ftCreationTime.dwHighDateTime=0x1d5de01, ftLastAccessTime.dwLowDateTime=0x462fa210, ftLastAccessTime.dwHighDateTime=0x1d5da85, ftLastWriteTime.dwLowDateTime=0x462fa210, ftLastWriteTime.dwHighDateTime=0x1d5da85, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JtRn9yupNk0.m4a", cAlternateFileName="JTRN9Y~1.M4A")) returned 1 [0156.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ff70d0, ftCreationTime.dwHighDateTime=0x1d5dd04, ftLastAccessTime.dwLowDateTime=0x9badfb30, ftLastAccessTime.dwHighDateTime=0x1d5e000, ftLastWriteTime.dwLowDateTime=0x9badfb30, ftLastWriteTime.dwHighDateTime=0x1d5e000, nFileSizeHigh=0x0, nFileSizeLow=0xaaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="k9Lbnh.mp3", cAlternateFileName="")) returned 1 [0156.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994e22a0, ftCreationTime.dwHighDateTime=0x1d5e3b8, ftLastAccessTime.dwLowDateTime=0x9e4414f0, ftLastAccessTime.dwHighDateTime=0x1d5e2a9, ftLastWriteTime.dwLowDateTime=0x9e4414f0, ftLastWriteTime.dwHighDateTime=0x1d5e2a9, nFileSizeHigh=0x0, nFileSizeLow=0xd85b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbLgT1I.mp3", cAlternateFileName="")) returned 1 [0156.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.709] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0156.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z", lpFilePart=0x0) returned 0x5e [0156.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\", lpFilePart=0x0) returned 0x5f [0156.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d12630, ftCreationTime.dwHighDateTime=0x1d5d9d7, ftLastAccessTime.dwLowDateTime=0x65e73d00, ftLastAccessTime.dwHighDateTime=0x1d5e35b, ftLastWriteTime.dwLowDateTime=0x65e73d00, ftLastWriteTime.dwHighDateTime=0x1d5e35b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe65360, ftCreationTime.dwHighDateTime=0x1d5db07, ftLastAccessTime.dwLowDateTime=0x4a70eeb0, ftLastAccessTime.dwHighDateTime=0x1d5dcc9, ftLastWriteTime.dwLowDateTime=0x4a70eeb0, ftLastWriteTime.dwHighDateTime=0x1d5dcc9, nFileSizeHigh=0x0, nFileSizeLow=0xe2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5di _gjI1.m4a", cAlternateFileName="5DI_GJ~1.M4A")) returned 1 [0156.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6037ee0, ftCreationTime.dwHighDateTime=0x1d5de01, ftLastAccessTime.dwLowDateTime=0x462fa210, ftLastAccessTime.dwHighDateTime=0x1d5da85, ftLastWriteTime.dwLowDateTime=0x462fa210, ftLastWriteTime.dwHighDateTime=0x1d5da85, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JtRn9yupNk0.m4a", cAlternateFileName="JTRN9Y~1.M4A")) returned 1 [0156.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ff70d0, ftCreationTime.dwHighDateTime=0x1d5dd04, ftLastAccessTime.dwLowDateTime=0x9badfb30, ftLastAccessTime.dwHighDateTime=0x1d5e000, ftLastWriteTime.dwLowDateTime=0x9badfb30, ftLastWriteTime.dwHighDateTime=0x1d5e000, nFileSizeHigh=0x0, nFileSizeLow=0xaaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="k9Lbnh.mp3", cAlternateFileName="")) returned 1 [0156.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994e22a0, ftCreationTime.dwHighDateTime=0x1d5e3b8, ftLastAccessTime.dwLowDateTime=0x9e4414f0, ftLastAccessTime.dwHighDateTime=0x1d5e2a9, ftLastWriteTime.dwLowDateTime=0x9e4414f0, ftLastWriteTime.dwHighDateTime=0x1d5e2a9, nFileSizeHigh=0x0, nFileSizeLow=0xd85b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbLgT1I.mp3", cAlternateFileName="")) returned 1 [0156.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994e22a0, ftCreationTime.dwHighDateTime=0x1d5e3b8, ftLastAccessTime.dwLowDateTime=0x9e4414f0, ftLastAccessTime.dwHighDateTime=0x1d5e2a9, ftLastWriteTime.dwLowDateTime=0x9e4414f0, ftLastWriteTime.dwHighDateTime=0x1d5e2a9, nFileSizeHigh=0x0, nFileSizeLow=0xd85b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbLgT1I.mp3", cAlternateFileName="")) returned 0 [0156.711] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0156.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0156.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", lpFilePart=0x0) returned 0x6c [0156.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.712] GetFileType (hFile=0x344) returned 0x1 [0156.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.712] GetFileType (hFile=0x344) returned 0x1 [0156.712] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xe2a0 [0156.712] ReadFile (in: hFile=0x344, lpBuffer=0x2841e30, nNumberOfBytesToRead=0xe2a0, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2841e30*, lpNumberOfBytesRead=0x12dbb8*=0xe2a0, lpOverlapped=0x0) returned 1 [0156.714] CloseHandle (hObject=0x344) returned 1 [0156.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", lpFilePart=0x0) returned 0x6c [0156.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0156.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.772] GetFileType (hFile=0x344) returned 0x1 [0156.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0156.772] GetFileType (hFile=0x344) returned 0x1 [0156.780] WriteFile (in: hFile=0x344, lpBuffer=0x26d4670*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x26d4670*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0156.781] CloseHandle (hObject=0x344) returned 1 [0156.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", lpFilePart=0x0) returned 0x6c [0156.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.783] GetFileType (hFile=0x344) returned 0x1 [0156.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.783] GetFileType (hFile=0x344) returned 0x1 [0156.783] WriteFile (in: hFile=0x344, lpBuffer=0x26c4df0*, nNumberOfBytesToWrite=0xe2b0, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x26c4df0*, lpNumberOfBytesWritten=0x12dc18*=0xe2b0, lpOverlapped=0x0) returned 1 [0156.785] CloseHandle (hObject=0x344) returned 1 [0156.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a", lpFilePart=0x0) returned 0x6c [0156.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x76 [0156.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe65360, ftCreationTime.dwHighDateTime=0x1d5db07, ftLastAccessTime.dwLowDateTime=0x4a70eeb0, ftLastAccessTime.dwHighDateTime=0x1d5dcc9, ftLastWriteTime.dwLowDateTime=0xb473a60, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe2b0)) returned 1 [0156.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0156.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\5di _gjI1.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\5di _gji1.m4a.symmyware")) returned 1 [0156.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", lpFilePart=0x0) returned 0x6e [0156.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.787] GetFileType (hFile=0x344) returned 0x1 [0156.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.788] GetFileType (hFile=0x344) returned 0x1 [0156.788] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x3bfc [0156.788] ReadFile (in: hFile=0x344, lpBuffer=0x26d5d28, nNumberOfBytesToRead=0x3bfc, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x26d5d28*, lpNumberOfBytesRead=0x12dbb8*=0x3bfc, lpOverlapped=0x0) returned 1 [0156.789] CloseHandle (hObject=0x344) returned 1 [0156.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", lpFilePart=0x0) returned 0x6e [0156.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0156.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.850] GetFileType (hFile=0x344) returned 0x1 [0156.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0156.850] GetFileType (hFile=0x344) returned 0x1 [0156.850] WriteFile (in: hFile=0x344, lpBuffer=0x273cc78*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x273cc78*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0156.852] CloseHandle (hObject=0x344) returned 1 [0156.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", lpFilePart=0x0) returned 0x6e [0156.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0156.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.853] GetFileType (hFile=0x344) returned 0x1 [0156.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0156.853] GetFileType (hFile=0x344) returned 0x1 [0156.853] WriteFile (in: hFile=0x344, lpBuffer=0x27379a8*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x27379a8*, lpNumberOfBytesWritten=0x12dc18*=0x3c00, lpOverlapped=0x0) returned 1 [0156.873] CloseHandle (hObject=0x344) returned 1 [0156.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a", lpFilePart=0x0) returned 0x6e [0156.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x78 [0156.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6037ee0, ftCreationTime.dwHighDateTime=0x1d5de01, ftLastAccessTime.dwLowDateTime=0x462fa210, ftLastAccessTime.dwHighDateTime=0x1d5da85, ftLastWriteTime.dwLowDateTime=0xb519aa0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0156.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0156.874] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\JtRn9yupNk0.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\jtrn9yupnk0.m4a.symmyware")) returned 1 [0156.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6c [0156.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0156.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\yF_slyfRRmyhODOTz9Z\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\yf_slyfrrmyhodotz9z\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.876] GetFileType (hFile=0x344) returned 0x1 [0156.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0156.876] GetFileType (hFile=0x344) returned 0x1 [0156.879] WriteFile (in: hFile=0x344, lpBuffer=0x27404a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27404a8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0156.880] CloseHandle (hObject=0x344) returned 1 [0156.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0156.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0156.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\DHiIjM3l7RsIfAzNsp1Q\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\dhiijm3l7rsifaznsp1q\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.882] GetFileType (hFile=0x344) returned 0x1 [0156.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0156.882] GetFileType (hFile=0x344) returned 0x1 [0156.883] WriteFile (in: hFile=0x344, lpBuffer=0x27437c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27437c0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0156.885] CloseHandle (hObject=0x344) returned 1 [0156.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0156.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0156.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\D34u0jFI_lXn8mGef\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d34u0jfi_lxn8mgef\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.886] GetFileType (hFile=0x344) returned 0x1 [0156.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0156.886] GetFileType (hFile=0x344) returned 0x1 [0156.888] WriteFile (in: hFile=0x344, lpBuffer=0x2746a78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2746a78*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0156.889] CloseHandle (hObject=0x344) returned 1 [0156.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p", lpFilePart=0x0) returned 0x38 [0156.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\", lpFilePart=0x0) returned 0x39 [0156.890] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.890] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.891] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845c3c40, ftCreationTime.dwHighDateTime=0x1d5e743, ftLastAccessTime.dwLowDateTime=0x427da0f0, ftLastAccessTime.dwHighDateTime=0x1d5e1b4, ftLastWriteTime.dwLowDateTime=0x427da0f0, ftLastWriteTime.dwHighDateTime=0x1d5e1b4, nFileSizeHigh=0x0, nFileSizeLow=0x1076a, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Tat4Y P-SUC4-HuYsv.wav", cAlternateFileName="4TAT4Y~1.WAV")) returned 1 [0156.891] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c98d00, ftCreationTime.dwHighDateTime=0x1d5e0f3, ftLastAccessTime.dwLowDateTime=0xcb58e860, ftLastAccessTime.dwHighDateTime=0x1d5dc7a, ftLastWriteTime.dwLowDateTime=0xcb58e860, ftLastWriteTime.dwHighDateTime=0x1d5dc7a, nFileSizeHigh=0x0, nFileSizeLow=0xeef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A7COf82opjEtzqu7sZ.wav", cAlternateFileName="A7COF8~1.WAV")) returned 1 [0156.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715ad40, ftCreationTime.dwHighDateTime=0x1d5e0a9, ftLastAccessTime.dwLowDateTime=0xdb1af800, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0xdb1af800, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0xada8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lGfE.wav", cAlternateFileName="")) returned 1 [0156.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d118b30, ftCreationTime.dwHighDateTime=0x1d5e1a0, ftLastAccessTime.dwLowDateTime=0x42a541e0, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x42a541e0, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="YZCEAedWHFYCxb5I.wav", cAlternateFileName="YZCEAE~1.WAV")) returned 1 [0156.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f2f350, ftCreationTime.dwHighDateTime=0x1d5da02, ftLastAccessTime.dwLowDateTime=0xf0ddffe0, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xf0ddffe0, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x9142, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z0jz34lUcc wCH.wav", cAlternateFileName="Z0JZ34~1.WAV")) returned 1 [0156.892] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.893] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p", lpFilePart=0x0) returned 0x38 [0156.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\", lpFilePart=0x0) returned 0x39 [0156.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.894] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7be917a0, ftCreationTime.dwHighDateTime=0x1d5e5c1, ftLastAccessTime.dwLowDateTime=0xb371c620, ftLastAccessTime.dwHighDateTime=0x1d5d91b, ftLastWriteTime.dwLowDateTime=0xb371c620, ftLastWriteTime.dwHighDateTime=0x1d5d91b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.895] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845c3c40, ftCreationTime.dwHighDateTime=0x1d5e743, ftLastAccessTime.dwLowDateTime=0x427da0f0, ftLastAccessTime.dwHighDateTime=0x1d5e1b4, ftLastWriteTime.dwLowDateTime=0x427da0f0, ftLastWriteTime.dwHighDateTime=0x1d5e1b4, nFileSizeHigh=0x0, nFileSizeLow=0x1076a, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Tat4Y P-SUC4-HuYsv.wav", cAlternateFileName="4TAT4Y~1.WAV")) returned 1 [0156.895] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c98d00, ftCreationTime.dwHighDateTime=0x1d5e0f3, ftLastAccessTime.dwLowDateTime=0xcb58e860, ftLastAccessTime.dwHighDateTime=0x1d5dc7a, ftLastWriteTime.dwLowDateTime=0xcb58e860, ftLastWriteTime.dwHighDateTime=0x1d5dc7a, nFileSizeHigh=0x0, nFileSizeLow=0xeef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A7COf82opjEtzqu7sZ.wav", cAlternateFileName="A7COF8~1.WAV")) returned 1 [0156.895] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715ad40, ftCreationTime.dwHighDateTime=0x1d5e0a9, ftLastAccessTime.dwLowDateTime=0xdb1af800, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0xdb1af800, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0xada8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lGfE.wav", cAlternateFileName="")) returned 1 [0156.896] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d118b30, ftCreationTime.dwHighDateTime=0x1d5e1a0, ftLastAccessTime.dwLowDateTime=0x42a541e0, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x42a541e0, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="YZCEAedWHFYCxb5I.wav", cAlternateFileName="YZCEAE~1.WAV")) returned 1 [0156.897] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f2f350, ftCreationTime.dwHighDateTime=0x1d5da02, ftLastAccessTime.dwLowDateTime=0xf0ddffe0, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xf0ddffe0, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x9142, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z0jz34lUcc wCH.wav", cAlternateFileName="Z0JZ34~1.WAV")) returned 1 [0156.897] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f2f350, ftCreationTime.dwHighDateTime=0x1d5da02, ftLastAccessTime.dwLowDateTime=0xf0ddffe0, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xf0ddffe0, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x9142, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z0jz34lUcc wCH.wav", cAlternateFileName="Z0JZ34~1.WAV")) returned 0 [0156.897] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0156.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0156.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\feI7sGNRDEhnpDkKw 4p\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fei7sgnrdehnpdkkw 4p\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.899] GetFileType (hFile=0x344) returned 0x1 [0156.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0156.899] GetFileType (hFile=0x344) returned 0x1 [0156.900] WriteFile (in: hFile=0x344, lpBuffer=0x274d2a8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x274d2a8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0156.901] CloseHandle (hObject=0x344) returned 1 [0156.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN", lpFilePart=0x0) returned 0x31 [0156.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\", lpFilePart=0x0) returned 0x32 [0156.902] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9786c4b0, ftCreationTime.dwHighDateTime=0x1d5dd58, ftLastAccessTime.dwLowDateTime=0x7b1aed0, ftLastAccessTime.dwHighDateTime=0x1d5de76, ftLastWriteTime.dwLowDateTime=0x7b1aed0, ftLastWriteTime.dwHighDateTime=0x1d5de76, nFileSizeHigh=0x0, nFileSizeLow=0x48c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfeG22GZ0t07Et9HJbQB.wav", cAlternateFileName="DFEG22~1.WAV")) returned 1 [0156.903] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60445f0, ftCreationTime.dwHighDateTime=0x1d5d8f6, ftLastAccessTime.dwLowDateTime=0x87dfbe00, ftLastAccessTime.dwHighDateTime=0x1d5e5e0, ftLastWriteTime.dwLowDateTime=0x87dfbe00, ftLastWriteTime.dwHighDateTime=0x1d5e5e0, nFileSizeHigh=0x0, nFileSizeLow=0xf3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffuwwQ5AHdQ.m4a", cAlternateFileName="FFUWWQ~1.M4A")) returned 1 [0156.904] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2239f8d0, ftCreationTime.dwHighDateTime=0x1d5e285, ftLastAccessTime.dwLowDateTime=0x71d49000, ftLastAccessTime.dwHighDateTime=0x1d5dbe4, ftLastWriteTime.dwLowDateTime=0x71d49000, ftLastWriteTime.dwHighDateTime=0x1d5dbe4, nFileSizeHigh=0x0, nFileSizeLow=0x13515, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrCOcvsyoXDUAzc7mAM5.mp3", cAlternateFileName="NRCOCV~1.MP3")) returned 1 [0156.904] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.904] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0156.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN", lpFilePart=0x0) returned 0x31 [0156.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\", lpFilePart=0x0) returned 0x32 [0156.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0156.905] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf92ad2d0, ftCreationTime.dwHighDateTime=0x1d5e297, ftLastAccessTime.dwLowDateTime=0xc58c5d80, ftLastAccessTime.dwHighDateTime=0x1d5e68f, ftLastWriteTime.dwLowDateTime=0xc58c5d80, ftLastWriteTime.dwHighDateTime=0x1d5e68f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9786c4b0, ftCreationTime.dwHighDateTime=0x1d5dd58, ftLastAccessTime.dwLowDateTime=0x7b1aed0, ftLastAccessTime.dwHighDateTime=0x1d5de76, ftLastWriteTime.dwLowDateTime=0x7b1aed0, ftLastWriteTime.dwHighDateTime=0x1d5de76, nFileSizeHigh=0x0, nFileSizeLow=0x48c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfeG22GZ0t07Et9HJbQB.wav", cAlternateFileName="DFEG22~1.WAV")) returned 1 [0156.906] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60445f0, ftCreationTime.dwHighDateTime=0x1d5d8f6, ftLastAccessTime.dwLowDateTime=0x87dfbe00, ftLastAccessTime.dwHighDateTime=0x1d5e5e0, ftLastWriteTime.dwLowDateTime=0x87dfbe00, ftLastWriteTime.dwHighDateTime=0x1d5e5e0, nFileSizeHigh=0x0, nFileSizeLow=0xf3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffuwwQ5AHdQ.m4a", cAlternateFileName="FFUWWQ~1.M4A")) returned 1 [0156.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2239f8d0, ftCreationTime.dwHighDateTime=0x1d5e285, ftLastAccessTime.dwLowDateTime=0x71d49000, ftLastAccessTime.dwHighDateTime=0x1d5dbe4, ftLastWriteTime.dwLowDateTime=0x71d49000, ftLastWriteTime.dwHighDateTime=0x1d5dbe4, nFileSizeHigh=0x0, nFileSizeLow=0x13515, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrCOcvsyoXDUAzc7mAM5.mp3", cAlternateFileName="NRCOCV~1.MP3")) returned 1 [0156.907] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2239f8d0, ftCreationTime.dwHighDateTime=0x1d5e285, ftLastAccessTime.dwLowDateTime=0x71d49000, ftLastAccessTime.dwHighDateTime=0x1d5dbe4, ftLastWriteTime.dwLowDateTime=0x71d49000, ftLastWriteTime.dwHighDateTime=0x1d5dbe4, nFileSizeHigh=0x0, nFileSizeLow=0x13515, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrCOcvsyoXDUAzc7mAM5.mp3", cAlternateFileName="NRCOCV~1.MP3")) returned 0 [0156.908] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0156.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0156.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0156.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", lpFilePart=0x0) returned 0x41 [0156.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0156.909] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xf3cc [0156.909] ReadFile (in: hFile=0x344, lpBuffer=0x2750f00, nNumberOfBytesToRead=0xf3cc, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2750f00*, lpNumberOfBytesRead=0x12dcb8*=0xf3cc, lpOverlapped=0x0) returned 1 [0156.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", lpFilePart=0x0) returned 0x41 [0156.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0156.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0156.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", lpFilePart=0x0) returned 0x41 [0156.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0156.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0156.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0156.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a", lpFilePart=0x0) returned 0x41 [0156.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a.SYMMYWARE", lpFilePart=0x0) returned 0x4b [0156.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0156.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60445f0, ftCreationTime.dwHighDateTime=0x1d5d8f6, ftLastAccessTime.dwLowDateTime=0x87dfbe00, ftLastAccessTime.dwHighDateTime=0x1d5e5e0, ftLastWriteTime.dwLowDateTime=0xb63c310, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xf3d0)) returned 1 [0156.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0156.995] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\ffuwwQ5AHdQ.m4a.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\ffuwwq5ahdq.m4a.symmyware")) returned 1 [0156.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0156.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0156.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\zt5 gN5414XbN\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zt5 gn5414xbn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0156.997] GetFileType (hFile=0x344) returned 0x1 [0156.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0156.998] GetFileType (hFile=0x344) returned 0x1 [0156.999] WriteFile (in: hFile=0x344, lpBuffer=0x27e1930*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27e1930*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0157.000] CloseHandle (hObject=0x344) returned 1 [0157.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0157.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0157.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.002] GetFileType (hFile=0x344) returned 0x1 [0157.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0157.002] GetFileType (hFile=0x344) returned 0x1 [0157.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0157.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", lpFilePart=0x0) returned 0x2b [0157.004] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0157.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0157.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0157.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.012] GetFileType (hFile=0x344) returned 0x1 [0157.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0157.012] GetFileType (hFile=0x344) returned 0x1 [0157.015] WriteFile (in: hFile=0x344, lpBuffer=0x27e91c8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27e91c8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0157.016] CloseHandle (hObject=0x344) returned 1 [0157.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0157.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", lpFilePart=0x0) returned 0x26 [0157.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0157.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0157.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0157.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.025] GetFileType (hFile=0x344) returned 0x1 [0157.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0157.025] GetFileType (hFile=0x344) returned 0x1 [0157.026] WriteFile (in: hFile=0x344, lpBuffer=0x27ed750*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27ed750*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0157.028] CloseHandle (hObject=0x344) returned 1 [0157.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0157.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0157.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa350710, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa350710, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973cf5f0, ftCreationTime.dwHighDateTime=0x1d5e565, ftLastAccessTime.dwLowDateTime=0x2e81050, ftLastAccessTime.dwHighDateTime=0x1d5db2a, ftLastWriteTime.dwLowDateTime=0x2e81050, ftLastWriteTime.dwHighDateTime=0x1d5db2a, nFileSizeHigh=0x0, nFileSizeLow=0x5e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 EZZs-XGJMm4WEm.png", cAlternateFileName="1EZZS-~1.PNG")) returned 1 [0157.029] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xada48880, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x2c346cf0, ftLastAccessTime.dwHighDateTime=0x1d5db44, ftLastWriteTime.dwLowDateTime=0x2c346cf0, ftLastWriteTime.dwHighDateTime=0x1d5db44, nFileSizeHigh=0x0, nFileSizeLow=0x18ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d7efwXJX2mBFTBCHv.bmp", cAlternateFileName="2D7EFW~1.BMP")) returned 1 [0157.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb04f2d0, ftCreationTime.dwHighDateTime=0x1d5e173, ftLastAccessTime.dwLowDateTime=0xbceec3e0, ftLastAccessTime.dwHighDateTime=0x1d5d990, ftLastWriteTime.dwLowDateTime=0xbceec3e0, ftLastWriteTime.dwHighDateTime=0x1d5d990, nFileSizeHigh=0x0, nFileSizeLow=0x51fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-psC9a6rMPP.jpg", cAlternateFileName="5-PSC9~1.JPG")) returned 1 [0157.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612391b0, ftCreationTime.dwHighDateTime=0x1d5dbcc, ftLastAccessTime.dwLowDateTime=0x8beffea0, ftLastAccessTime.dwHighDateTime=0x1d5e5aa, ftLastWriteTime.dwLowDateTime=0x8beffea0, ftLastWriteTime.dwHighDateTime=0x1d5e5aa, nFileSizeHigh=0x0, nFileSizeLow=0x186b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Xp-QSW3mt.bmp", cAlternateFileName="9XP-QS~1.BMP")) returned 1 [0157.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2abb00, ftCreationTime.dwHighDateTime=0x1d5dc0b, ftLastAccessTime.dwLowDateTime=0xa9df460, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0xa9df460, ftLastWriteTime.dwHighDateTime=0x1d5e53c, nFileSizeHigh=0x0, nFileSizeLow=0x11a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BH9oQWN.jpg", cAlternateFileName="")) returned 1 [0157.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b90930, ftCreationTime.dwHighDateTime=0x1d5dac9, ftLastAccessTime.dwLowDateTime=0xf8a7cce0, ftLastAccessTime.dwHighDateTime=0x1d5ddc5, ftLastWriteTime.dwLowDateTime=0xf8a7cce0, ftLastWriteTime.dwHighDateTime=0x1d5ddc5, nFileSizeHigh=0x0, nFileSizeLow=0x5fa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cjFA.gif", cAlternateFileName="")) returned 1 [0157.030] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3baad60, ftCreationTime.dwHighDateTime=0x1d5d9ef, ftLastAccessTime.dwLowDateTime=0xb9414140, ftLastAccessTime.dwHighDateTime=0x1d5e15c, ftLastWriteTime.dwLowDateTime=0xb9414140, ftLastWriteTime.dwHighDateTime=0x1d5e15c, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="OaxLM.png", cAlternateFileName="")) returned 1 [0157.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PyAM_gKCYeDWLGX0", cAlternateFileName="PYAM_G~1")) returned 1 [0157.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ed4340, ftCreationTime.dwHighDateTime=0x1d5e2fa, ftLastAccessTime.dwLowDateTime=0x2a641d00, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0x2a641d00, ftLastWriteTime.dwHighDateTime=0x1d5df66, nFileSizeHigh=0x0, nFileSizeLow=0xcc6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="R0p3IY6p4A7k9D.jpg", cAlternateFileName="R0P3IY~1.JPG")) returned 1 [0157.031] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa350710, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa352e20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0157.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb74a0, ftCreationTime.dwHighDateTime=0x1d5e31d, ftLastAccessTime.dwLowDateTime=0xb8d18450, ftLastAccessTime.dwHighDateTime=0x1d5df3f, ftLastWriteTime.dwLowDateTime=0xb8d18450, ftLastWriteTime.dwHighDateTime=0x1d5df3f, nFileSizeHigh=0x0, nFileSizeLow=0xefa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XY1pM-hjfOMNZGzYyo.gif", cAlternateFileName="XY1PM-~1.GIF")) returned 1 [0157.032] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.032] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0157.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0157.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0157.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0157.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa350710, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa350710, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.033] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973cf5f0, ftCreationTime.dwHighDateTime=0x1d5e565, ftLastAccessTime.dwLowDateTime=0x2e81050, ftLastAccessTime.dwHighDateTime=0x1d5db2a, ftLastWriteTime.dwLowDateTime=0x2e81050, ftLastWriteTime.dwHighDateTime=0x1d5db2a, nFileSizeHigh=0x0, nFileSizeLow=0x5e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 EZZs-XGJMm4WEm.png", cAlternateFileName="1EZZS-~1.PNG")) returned 1 [0157.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xada48880, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x2c346cf0, ftLastAccessTime.dwHighDateTime=0x1d5db44, ftLastWriteTime.dwLowDateTime=0x2c346cf0, ftLastWriteTime.dwHighDateTime=0x1d5db44, nFileSizeHigh=0x0, nFileSizeLow=0x18ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d7efwXJX2mBFTBCHv.bmp", cAlternateFileName="2D7EFW~1.BMP")) returned 1 [0157.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb04f2d0, ftCreationTime.dwHighDateTime=0x1d5e173, ftLastAccessTime.dwLowDateTime=0xbceec3e0, ftLastAccessTime.dwHighDateTime=0x1d5d990, ftLastWriteTime.dwLowDateTime=0xbceec3e0, ftLastWriteTime.dwHighDateTime=0x1d5d990, nFileSizeHigh=0x0, nFileSizeLow=0x51fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-psC9a6rMPP.jpg", cAlternateFileName="5-PSC9~1.JPG")) returned 1 [0157.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612391b0, ftCreationTime.dwHighDateTime=0x1d5dbcc, ftLastAccessTime.dwLowDateTime=0x8beffea0, ftLastAccessTime.dwHighDateTime=0x1d5e5aa, ftLastWriteTime.dwLowDateTime=0x8beffea0, ftLastWriteTime.dwHighDateTime=0x1d5e5aa, nFileSizeHigh=0x0, nFileSizeLow=0x186b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Xp-QSW3mt.bmp", cAlternateFileName="9XP-QS~1.BMP")) returned 1 [0157.034] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2abb00, ftCreationTime.dwHighDateTime=0x1d5dc0b, ftLastAccessTime.dwLowDateTime=0xa9df460, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0xa9df460, ftLastWriteTime.dwHighDateTime=0x1d5e53c, nFileSizeHigh=0x0, nFileSizeLow=0x11a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BH9oQWN.jpg", cAlternateFileName="")) returned 1 [0157.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b90930, ftCreationTime.dwHighDateTime=0x1d5dac9, ftLastAccessTime.dwLowDateTime=0xf8a7cce0, ftLastAccessTime.dwHighDateTime=0x1d5ddc5, ftLastWriteTime.dwLowDateTime=0xf8a7cce0, ftLastWriteTime.dwHighDateTime=0x1d5ddc5, nFileSizeHigh=0x0, nFileSizeLow=0x5fa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cjFA.gif", cAlternateFileName="")) returned 1 [0157.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.035] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3baad60, ftCreationTime.dwHighDateTime=0x1d5d9ef, ftLastAccessTime.dwLowDateTime=0xb9414140, ftLastAccessTime.dwHighDateTime=0x1d5e15c, ftLastWriteTime.dwLowDateTime=0xb9414140, ftLastWriteTime.dwHighDateTime=0x1d5e15c, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="OaxLM.png", cAlternateFileName="")) returned 1 [0157.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PyAM_gKCYeDWLGX0", cAlternateFileName="PYAM_G~1")) returned 1 [0157.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ed4340, ftCreationTime.dwHighDateTime=0x1d5e2fa, ftLastAccessTime.dwLowDateTime=0x2a641d00, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0x2a641d00, ftLastWriteTime.dwHighDateTime=0x1d5df66, nFileSizeHigh=0x0, nFileSizeLow=0xcc6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="R0p3IY6p4A7k9D.jpg", cAlternateFileName="R0P3IY~1.JPG")) returned 1 [0157.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa350710, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa350710, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa352e20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0157.036] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb74a0, ftCreationTime.dwHighDateTime=0x1d5e31d, ftLastAccessTime.dwLowDateTime=0xb8d18450, ftLastAccessTime.dwHighDateTime=0x1d5df3f, ftLastWriteTime.dwLowDateTime=0xb8d18450, ftLastWriteTime.dwHighDateTime=0x1d5df3f, nFileSizeHigh=0x0, nFileSizeLow=0xefa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XY1pM-hjfOMNZGzYyo.gif", cAlternateFileName="XY1PM-~1.GIF")) returned 1 [0157.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb74a0, ftCreationTime.dwHighDateTime=0x1d5e31d, ftLastAccessTime.dwLowDateTime=0xb8d18450, ftLastAccessTime.dwHighDateTime=0x1d5df3f, ftLastWriteTime.dwLowDateTime=0xb8d18450, ftLastWriteTime.dwHighDateTime=0x1d5df3f, nFileSizeHigh=0x0, nFileSizeLow=0xefa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="XY1pM-hjfOMNZGzYyo.gif", cAlternateFileName="XY1PM-~1.GIF")) returned 0 [0157.037] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0157.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0157.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", lpFilePart=0x0) returned 0x3b [0157.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.038] GetFileType (hFile=0x344) returned 0x1 [0157.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.038] GetFileType (hFile=0x344) returned 0x1 [0157.038] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x5e19 [0157.038] ReadFile (in: hFile=0x344, lpBuffer=0x27f3028, nNumberOfBytesToRead=0x5e19, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27f3028*, lpNumberOfBytesRead=0x12dd38*=0x5e19, lpOverlapped=0x0) returned 1 [0157.040] CloseHandle (hObject=0x344) returned 1 [0157.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", lpFilePart=0x0) returned 0x3b [0157.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0157.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.125] GetFileType (hFile=0x344) returned 0x1 [0157.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0157.125] GetFileType (hFile=0x344) returned 0x1 [0157.125] WriteFile (in: hFile=0x344, lpBuffer=0x28669f8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28669f8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0157.127] CloseHandle (hObject=0x344) returned 1 [0157.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", lpFilePart=0x0) returned 0x3b [0157.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.128] GetFileType (hFile=0x344) returned 0x1 [0157.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.128] GetFileType (hFile=0x344) returned 0x1 [0157.128] WriteFile (in: hFile=0x344, lpBuffer=0x285f560*, nNumberOfBytesToWrite=0x5e20, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x285f560*, lpNumberOfBytesWritten=0x12dd98*=0x5e20, lpOverlapped=0x0) returned 1 [0157.130] CloseHandle (hObject=0x344) returned 1 [0157.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png", lpFilePart=0x0) returned 0x3b [0157.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png.SYMMYWARE", lpFilePart=0x0) returned 0x45 [0157.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973cf5f0, ftCreationTime.dwHighDateTime=0x1d5e565, ftLastAccessTime.dwLowDateTime=0x2e81050, ftLastAccessTime.dwHighDateTime=0x1d5db2a, ftLastWriteTime.dwLowDateTime=0xb779930, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5e20)) returned 1 [0157.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0157.131] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1 EZZs-XGJMm4WEm.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1 ezzs-xgjmm4wem.png.symmyware")) returned 1 [0157.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", lpFilePart=0x0) returned 0x37 [0157.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.133] GetFileType (hFile=0x344) returned 0x1 [0157.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.133] GetFileType (hFile=0x344) returned 0x1 [0157.133] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x51fd [0157.133] ReadFile (in: hFile=0x344, lpBuffer=0x2867ef0, nNumberOfBytesToRead=0x51fd, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2867ef0*, lpNumberOfBytesRead=0x12dd38*=0x51fd, lpOverlapped=0x0) returned 1 [0157.134] CloseHandle (hObject=0x344) returned 1 [0157.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", lpFilePart=0x0) returned 0x37 [0157.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0157.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.149] GetFileType (hFile=0x344) returned 0x1 [0157.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0157.149] GetFileType (hFile=0x344) returned 0x1 [0157.160] WriteFile (in: hFile=0x344, lpBuffer=0x26dcda8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x26dcda8*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0157.161] CloseHandle (hObject=0x344) returned 1 [0157.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", lpFilePart=0x0) returned 0x37 [0157.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.163] GetFileType (hFile=0x344) returned 0x1 [0157.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.163] GetFileType (hFile=0x344) returned 0x1 [0157.163] WriteFile (in: hFile=0x344, lpBuffer=0x26d65d8*, nNumberOfBytesToWrite=0x5200, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x26d65d8*, lpNumberOfBytesWritten=0x12dd98*=0x5200, lpOverlapped=0x0) returned 1 [0157.165] CloseHandle (hObject=0x344) returned 1 [0157.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg", lpFilePart=0x0) returned 0x37 [0157.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0157.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb04f2d0, ftCreationTime.dwHighDateTime=0x1d5e173, ftLastAccessTime.dwLowDateTime=0xbceec3e0, ftLastAccessTime.dwHighDateTime=0x1d5d990, ftLastWriteTime.dwLowDateTime=0xb7ca240, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5200)) returned 1 [0157.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0157.166] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5-psC9a6rMPP.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5-psc9a6rmpp.jpg.symmyware")) returned 1 [0157.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", lpFilePart=0x0) returned 0x32 [0157.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.168] GetFileType (hFile=0x344) returned 0x1 [0157.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.168] GetFileType (hFile=0x344) returned 0x1 [0157.168] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x11a08 [0157.168] ReadFile (in: hFile=0x344, lpBuffer=0x26de260, nNumberOfBytesToRead=0x11a08, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26de260*, lpNumberOfBytesRead=0x12dd38*=0x11a08, lpOverlapped=0x0) returned 1 [0157.170] CloseHandle (hObject=0x344) returned 1 [0157.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", lpFilePart=0x0) returned 0x32 [0157.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0157.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.383] GetFileType (hFile=0x344) returned 0x1 [0157.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0157.383] GetFileType (hFile=0x344) returned 0x1 [0157.384] WriteFile (in: hFile=0x344, lpBuffer=0x2775170*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2775170*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0157.385] CloseHandle (hObject=0x344) returned 1 [0157.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", lpFilePart=0x0) returned 0x32 [0157.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.386] GetFileType (hFile=0x344) returned 0x1 [0157.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.387] GetFileType (hFile=0x344) returned 0x1 [0157.387] WriteFile (in: hFile=0x344, lpBuffer=0x2762110*, nNumberOfBytesToWrite=0x11a10, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x2762110*, lpNumberOfBytesWritten=0x12dd98*=0x11a10, lpOverlapped=0x0) returned 1 [0157.389] CloseHandle (hObject=0x344) returned 1 [0157.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg", lpFilePart=0x0) returned 0x32 [0157.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x3c [0157.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2abb00, ftCreationTime.dwHighDateTime=0x1d5dc0b, ftLastAccessTime.dwLowDateTime=0xa9df460, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0xb9e0cf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x11a10)) returned 1 [0157.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0157.390] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BH9oQWN.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bh9oqwn.jpg.symmyware")) returned 1 [0157.391] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", lpFilePart=0x0) returned 0x30 [0157.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.391] GetFileType (hFile=0x344) returned 0x1 [0157.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.392] GetFileType (hFile=0x344) returned 0x1 [0157.392] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xa0df [0157.392] ReadFile (in: hFile=0x344, lpBuffer=0x2776620, nNumberOfBytesToRead=0xa0df, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2776620*, lpNumberOfBytesRead=0x12dd38*=0xa0df, lpOverlapped=0x0) returned 1 [0157.393] CloseHandle (hObject=0x344) returned 1 [0157.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", lpFilePart=0x0) returned 0x30 [0157.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0157.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.406] GetFileType (hFile=0x344) returned 0x1 [0157.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0157.406] GetFileType (hFile=0x344) returned 0x1 [0157.407] WriteFile (in: hFile=0x344, lpBuffer=0x2803048*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2803048*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0157.408] CloseHandle (hObject=0x344) returned 1 [0157.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", lpFilePart=0x0) returned 0x30 [0157.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.409] GetFileType (hFile=0x344) returned 0x1 [0157.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.409] GetFileType (hFile=0x344) returned 0x1 [0157.410] WriteFile (in: hFile=0x344, lpBuffer=0x27f7918*, nNumberOfBytesToWrite=0xa0e0, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x27f7918*, lpNumberOfBytesWritten=0x12dd98*=0xa0e0, lpOverlapped=0x0) returned 1 [0157.412] CloseHandle (hObject=0x344) returned 1 [0157.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png", lpFilePart=0x0) returned 0x30 [0157.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png.SYMMYWARE", lpFilePart=0x0) returned 0x3a [0157.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3baad60, ftCreationTime.dwHighDateTime=0x1d5d9ef, ftLastAccessTime.dwLowDateTime=0xb9414140, ftLastAccessTime.dwHighDateTime=0x1d5e15c, ftLastWriteTime.dwLowDateTime=0xba11a30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa0e0)) returned 1 [0157.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0157.412] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OaxLM.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oaxlm.png.symmyware")) returned 1 [0157.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", lpFilePart=0x0) returned 0x39 [0157.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.416] GetFileType (hFile=0x344) returned 0x1 [0157.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.416] GetFileType (hFile=0x344) returned 0x1 [0157.416] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xcc6f [0157.416] ReadFile (in: hFile=0x344, lpBuffer=0x28044b8, nNumberOfBytesToRead=0xcc6f, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28044b8*, lpNumberOfBytesRead=0x12dd38*=0xcc6f, lpOverlapped=0x0) returned 1 [0157.418] CloseHandle (hObject=0x344) returned 1 [0157.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", lpFilePart=0x0) returned 0x39 [0157.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0157.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.430] GetFileType (hFile=0x344) returned 0x1 [0157.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0157.430] GetFileType (hFile=0x344) returned 0x1 [0157.431] WriteFile (in: hFile=0x344, lpBuffer=0x2887b88*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x2887b88*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0157.432] CloseHandle (hObject=0x344) returned 1 [0157.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", lpFilePart=0x0) returned 0x39 [0157.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.433] GetFileType (hFile=0x344) returned 0x1 [0157.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0157.433] GetFileType (hFile=0x344) returned 0x1 [0157.434] WriteFile (in: hFile=0x344, lpBuffer=0x28798a8*, nNumberOfBytesToWrite=0xcc70, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x28798a8*, lpNumberOfBytesWritten=0x12dd98*=0xcc70, lpOverlapped=0x0) returned 1 [0157.436] CloseHandle (hObject=0x344) returned 1 [0157.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg", lpFilePart=0x0) returned 0x39 [0157.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x43 [0157.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ed4340, ftCreationTime.dwHighDateTime=0x1d5e2fa, ftLastAccessTime.dwLowDateTime=0x2a641d00, ftLastAccessTime.dwHighDateTime=0x1d5df66, ftLastWriteTime.dwLowDateTime=0xba44e80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xcc70)) returned 1 [0157.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0157.437] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\R0p3IY6p4A7k9D.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\r0p3iy6p4a7k9d.jpg.symmyware")) returned 1 [0157.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0", lpFilePart=0x0) returned 0x37 [0157.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\", lpFilePart=0x0) returned 0x38 [0157.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.438] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9f2140, ftCreationTime.dwHighDateTime=0x1d5dd37, ftLastAccessTime.dwLowDateTime=0xb2ea6680, ftLastAccessTime.dwHighDateTime=0x1d5e578, ftLastWriteTime.dwLowDateTime=0xb2ea6680, ftLastWriteTime.dwHighDateTime=0x1d5e578, nFileSizeHigh=0x0, nFileSizeLow=0x15df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN8xfHlN16FUNgZj5g.gif", cAlternateFileName="AN8XFH~1.GIF")) returned 1 [0157.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc171cfd0, ftCreationTime.dwHighDateTime=0x1d5e619, ftLastAccessTime.dwLowDateTime=0xf361abd0, ftLastAccessTime.dwHighDateTime=0x1d5d9ff, ftLastWriteTime.dwLowDateTime=0xf361abd0, ftLastWriteTime.dwHighDateTime=0x1d5d9ff, nFileSizeHigh=0x0, nFileSizeLow=0xcc1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dy2fnO.bmp", cAlternateFileName="")) returned 1 [0157.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x545485c0, ftCreationTime.dwHighDateTime=0x1d5e76b, ftLastAccessTime.dwLowDateTime=0xcd9425b0, ftLastAccessTime.dwHighDateTime=0x1d5e56a, ftLastWriteTime.dwLowDateTime=0xcd9425b0, ftLastWriteTime.dwHighDateTime=0x1d5e56a, nFileSizeHigh=0x0, nFileSizeLow=0x144d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipYN.jpg", cAlternateFileName="")) returned 1 [0157.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51f07c0, ftCreationTime.dwHighDateTime=0x1d5e79d, ftLastAccessTime.dwLowDateTime=0x50e858b0, ftLastAccessTime.dwHighDateTime=0x1d5db3d, ftLastWriteTime.dwLowDateTime=0x50e858b0, ftLastWriteTime.dwHighDateTime=0x1d5db3d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IslAT12fkWvfW.png", cAlternateFileName="ISLAT1~1.PNG")) returned 1 [0157.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef966f0, ftCreationTime.dwHighDateTime=0x1d5dfb7, ftLastAccessTime.dwLowDateTime=0xbaaedc20, ftLastAccessTime.dwHighDateTime=0x1d5e4ab, ftLastWriteTime.dwLowDateTime=0xbaaedc20, ftLastWriteTime.dwHighDateTime=0x1d5e4ab, nFileSizeHigh=0x0, nFileSizeLow=0xb389, dwReserved0=0x0, dwReserved1=0x0, cFileName="nHY2D.bmp", cAlternateFileName="")) returned 1 [0157.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf6340, ftCreationTime.dwHighDateTime=0x1d5da45, ftLastAccessTime.dwLowDateTime=0x4ecf3a30, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0x4ecf3a30, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0xcc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVqvb_gUSo.bmp", cAlternateFileName="OVQVB_~1.BMP")) returned 1 [0157.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59be8420, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x92f0a670, ftLastAccessTime.dwHighDateTime=0x1d5de37, ftLastWriteTime.dwLowDateTime=0x92f0a670, ftLastWriteTime.dwHighDateTime=0x1d5de37, nFileSizeHigh=0x0, nFileSizeLow=0xa24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pt1U.jpg", cAlternateFileName="")) returned 1 [0157.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x123a8b40, ftCreationTime.dwHighDateTime=0x1d5e7d3, ftLastAccessTime.dwLowDateTime=0x3595bff0, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0x3595bff0, ftLastWriteTime.dwHighDateTime=0x1d5da46, nFileSizeHigh=0x0, nFileSizeLow=0xc428, dwReserved0=0x0, dwReserved1=0x0, cFileName="QcQF.png", cAlternateFileName="")) returned 1 [0157.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wFM81DGGaIpMTd", cAlternateFileName="WFM81D~1")) returned 1 [0157.441] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a10350, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0x33936d30, ftLastAccessTime.dwHighDateTime=0x1d5df5d, ftLastWriteTime.dwLowDateTime=0x33936d30, ftLastWriteTime.dwHighDateTime=0x1d5df5d, nFileSizeHigh=0x0, nFileSizeLow=0x159c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0rBt5tlBAfR.bmp", cAlternateFileName="Z0RBT5~1.BMP")) returned 1 [0157.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.442] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0157.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0157.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0157.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0", lpFilePart=0x0) returned 0x37 [0157.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\", lpFilePart=0x0) returned 0x38 [0157.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.442] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5922d090, ftCreationTime.dwHighDateTime=0x1d5df71, ftLastAccessTime.dwLowDateTime=0x3998d510, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x3998d510, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9f2140, ftCreationTime.dwHighDateTime=0x1d5dd37, ftLastAccessTime.dwLowDateTime=0xb2ea6680, ftLastAccessTime.dwHighDateTime=0x1d5e578, ftLastWriteTime.dwLowDateTime=0xb2ea6680, ftLastWriteTime.dwHighDateTime=0x1d5e578, nFileSizeHigh=0x0, nFileSizeLow=0x15df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN8xfHlN16FUNgZj5g.gif", cAlternateFileName="AN8XFH~1.GIF")) returned 1 [0157.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc171cfd0, ftCreationTime.dwHighDateTime=0x1d5e619, ftLastAccessTime.dwLowDateTime=0xf361abd0, ftLastAccessTime.dwHighDateTime=0x1d5d9ff, ftLastWriteTime.dwLowDateTime=0xf361abd0, ftLastWriteTime.dwHighDateTime=0x1d5d9ff, nFileSizeHigh=0x0, nFileSizeLow=0xcc1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dy2fnO.bmp", cAlternateFileName="")) returned 1 [0157.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x545485c0, ftCreationTime.dwHighDateTime=0x1d5e76b, ftLastAccessTime.dwLowDateTime=0xcd9425b0, ftLastAccessTime.dwHighDateTime=0x1d5e56a, ftLastWriteTime.dwLowDateTime=0xcd9425b0, ftLastWriteTime.dwHighDateTime=0x1d5e56a, nFileSizeHigh=0x0, nFileSizeLow=0x144d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipYN.jpg", cAlternateFileName="")) returned 1 [0157.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51f07c0, ftCreationTime.dwHighDateTime=0x1d5e79d, ftLastAccessTime.dwLowDateTime=0x50e858b0, ftLastAccessTime.dwHighDateTime=0x1d5db3d, ftLastWriteTime.dwLowDateTime=0x50e858b0, ftLastWriteTime.dwHighDateTime=0x1d5db3d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IslAT12fkWvfW.png", cAlternateFileName="ISLAT1~1.PNG")) returned 1 [0157.443] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef966f0, ftCreationTime.dwHighDateTime=0x1d5dfb7, ftLastAccessTime.dwLowDateTime=0xbaaedc20, ftLastAccessTime.dwHighDateTime=0x1d5e4ab, ftLastWriteTime.dwLowDateTime=0xbaaedc20, ftLastWriteTime.dwHighDateTime=0x1d5e4ab, nFileSizeHigh=0x0, nFileSizeLow=0xb389, dwReserved0=0x0, dwReserved1=0x0, cFileName="nHY2D.bmp", cAlternateFileName="")) returned 1 [0157.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf6340, ftCreationTime.dwHighDateTime=0x1d5da45, ftLastAccessTime.dwLowDateTime=0x4ecf3a30, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0x4ecf3a30, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0xcc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="oVqvb_gUSo.bmp", cAlternateFileName="OVQVB_~1.BMP")) returned 1 [0157.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59be8420, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x92f0a670, ftLastAccessTime.dwHighDateTime=0x1d5de37, ftLastWriteTime.dwLowDateTime=0x92f0a670, ftLastWriteTime.dwHighDateTime=0x1d5de37, nFileSizeHigh=0x0, nFileSizeLow=0xa24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pt1U.jpg", cAlternateFileName="")) returned 1 [0157.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x123a8b40, ftCreationTime.dwHighDateTime=0x1d5e7d3, ftLastAccessTime.dwLowDateTime=0x3595bff0, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0x3595bff0, ftLastWriteTime.dwHighDateTime=0x1d5da46, nFileSizeHigh=0x0, nFileSizeLow=0xc428, dwReserved0=0x0, dwReserved1=0x0, cFileName="QcQF.png", cAlternateFileName="")) returned 1 [0157.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wFM81DGGaIpMTd", cAlternateFileName="WFM81D~1")) returned 1 [0157.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a10350, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0x33936d30, ftLastAccessTime.dwHighDateTime=0x1d5df5d, ftLastWriteTime.dwLowDateTime=0x33936d30, ftLastWriteTime.dwHighDateTime=0x1d5df5d, nFileSizeHigh=0x0, nFileSizeLow=0x159c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0rBt5tlBAfR.bmp", cAlternateFileName="Z0RBT5~1.BMP")) returned 1 [0157.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a10350, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0x33936d30, ftLastAccessTime.dwHighDateTime=0x1d5df5d, ftLastWriteTime.dwLowDateTime=0x33936d30, ftLastWriteTime.dwHighDateTime=0x1d5df5d, nFileSizeHigh=0x0, nFileSizeLow=0x159c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="z0rBt5tlBAfR.bmp", cAlternateFileName="Z0RBT5~1.BMP")) returned 0 [0157.445] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0157.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0157.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", lpFilePart=0x0) returned 0x40 [0157.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.446] GetFileType (hFile=0x344) returned 0x1 [0157.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.446] GetFileType (hFile=0x344) returned 0x1 [0157.446] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x144d4 [0157.446] ReadFile (in: hFile=0x344, lpBuffer=0x288d7c0, nNumberOfBytesToRead=0x144d4, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x288d7c0*, lpNumberOfBytesRead=0x12dcb8*=0x144d4, lpOverlapped=0x0) returned 1 [0157.448] CloseHandle (hObject=0x344) returned 1 [0157.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", lpFilePart=0x0) returned 0x40 [0157.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0157.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.524] GetFileType (hFile=0x344) returned 0x1 [0157.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0157.524] GetFileType (hFile=0x344) returned 0x1 [0157.524] WriteFile (in: hFile=0x344, lpBuffer=0x2745928*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2745928*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0157.526] CloseHandle (hObject=0x344) returned 1 [0157.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", lpFilePart=0x0) returned 0x40 [0157.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.527] GetFileType (hFile=0x344) returned 0x1 [0157.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.528] GetFileType (hFile=0x344) returned 0x1 [0157.528] WriteFile (in: hFile=0x344, lpBuffer=0x272fdd8*, nNumberOfBytesToWrite=0x144e0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x272fdd8*, lpNumberOfBytesWritten=0x12dd18*=0x144e0, lpOverlapped=0x0) returned 1 [0157.531] CloseHandle (hObject=0x344) returned 1 [0157.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg", lpFilePart=0x0) returned 0x40 [0157.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0157.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x545485c0, ftCreationTime.dwHighDateTime=0x1d5e76b, ftLastAccessTime.dwLowDateTime=0xcd9425b0, ftLastAccessTime.dwHighDateTime=0x1d5e56a, ftLastWriteTime.dwLowDateTime=0xbb23130, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x144e0)) returned 1 [0157.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0157.531] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\ipYN.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\ipyn.jpg.symmyware")) returned 1 [0157.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", lpFilePart=0x0) returned 0x49 [0157.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.533] GetFileType (hFile=0x344) returned 0x1 [0157.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.533] GetFileType (hFile=0x344) returned 0x1 [0157.533] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1ac7 [0157.533] ReadFile (in: hFile=0x344, lpBuffer=0x2746e38, nNumberOfBytesToRead=0x1ac7, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2746e38*, lpNumberOfBytesRead=0x12dcb8*=0x1ac7, lpOverlapped=0x0) returned 1 [0157.535] CloseHandle (hObject=0x344) returned 1 [0157.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", lpFilePart=0x0) returned 0x49 [0157.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0157.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.635] GetFileType (hFile=0x344) returned 0x1 [0157.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0157.636] GetFileType (hFile=0x344) returned 0x1 [0157.636] WriteFile (in: hFile=0x344, lpBuffer=0x27a1628*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27a1628*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0157.637] CloseHandle (hObject=0x344) returned 1 [0157.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", lpFilePart=0x0) returned 0x49 [0157.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.639] GetFileType (hFile=0x344) returned 0x1 [0157.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.639] GetFileType (hFile=0x344) returned 0x1 [0157.639] WriteFile (in: hFile=0x344, lpBuffer=0x279e4c8*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x279e4c8*, lpNumberOfBytesWritten=0x12dd18*=0x1ad0, lpOverlapped=0x0) returned 1 [0157.641] CloseHandle (hObject=0x344) returned 1 [0157.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png", lpFilePart=0x0) returned 0x49 [0157.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png.SYMMYWARE", lpFilePart=0x0) returned 0x53 [0157.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51f07c0, ftCreationTime.dwHighDateTime=0x1d5e79d, ftLastAccessTime.dwLowDateTime=0x50e858b0, ftLastAccessTime.dwHighDateTime=0x1d5db3d, ftLastWriteTime.dwLowDateTime=0xbc284e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1ad0)) returned 1 [0157.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0157.641] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\IslAT12fkWvfW.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\islat12fkwvfw.png.symmyware")) returned 1 [0157.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", lpFilePart=0x0) returned 0x40 [0157.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.643] GetFileType (hFile=0x344) returned 0x1 [0157.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.643] GetFileType (hFile=0x344) returned 0x1 [0157.644] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xa24a [0157.644] ReadFile (in: hFile=0x344, lpBuffer=0x27a2bb8, nNumberOfBytesToRead=0xa24a, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27a2bb8*, lpNumberOfBytesRead=0x12dcb8*=0xa24a, lpOverlapped=0x0) returned 1 [0157.645] CloseHandle (hObject=0x344) returned 1 [0157.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", lpFilePart=0x0) returned 0x40 [0157.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0157.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.661] GetFileType (hFile=0x344) returned 0x1 [0157.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0157.661] GetFileType (hFile=0x344) returned 0x1 [0157.661] WriteFile (in: hFile=0x344, lpBuffer=0x282fea0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x282fea0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0157.663] CloseHandle (hObject=0x344) returned 1 [0157.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", lpFilePart=0x0) returned 0x40 [0157.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.667] GetFileType (hFile=0x344) returned 0x1 [0157.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.667] GetFileType (hFile=0x344) returned 0x1 [0157.667] WriteFile (in: hFile=0x344, lpBuffer=0x28245e0*, nNumberOfBytesToWrite=0xa250, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28245e0*, lpNumberOfBytesWritten=0x12dd18*=0xa250, lpOverlapped=0x0) returned 1 [0157.669] CloseHandle (hObject=0x344) returned 1 [0157.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg", lpFilePart=0x0) returned 0x40 [0157.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0157.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59be8420, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x92f0a670, ftLastAccessTime.dwHighDateTime=0x1d5de37, ftLastWriteTime.dwLowDateTime=0xbc6a390, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa250)) returned 1 [0157.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0157.670] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\Pt1U.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\pt1u.jpg.symmyware")) returned 1 [0157.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", lpFilePart=0x0) returned 0x40 [0157.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.672] GetFileType (hFile=0x344) returned 0x1 [0157.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.672] GetFileType (hFile=0x344) returned 0x1 [0157.673] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xc428 [0157.673] ReadFile (in: hFile=0x344, lpBuffer=0x2831390, nNumberOfBytesToRead=0xc428, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2831390*, lpNumberOfBytesRead=0x12dcb8*=0xc428, lpOverlapped=0x0) returned 1 [0157.674] CloseHandle (hObject=0x344) returned 1 [0157.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", lpFilePart=0x0) returned 0x40 [0157.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0157.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.694] GetFileType (hFile=0x344) returned 0x1 [0157.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0157.695] GetFileType (hFile=0x344) returned 0x1 [0157.695] WriteFile (in: hFile=0x344, lpBuffer=0x28b2958*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28b2958*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0157.696] CloseHandle (hObject=0x344) returned 1 [0157.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", lpFilePart=0x0) returned 0x40 [0157.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0157.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.697] GetFileType (hFile=0x344) returned 0x1 [0157.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0157.698] GetFileType (hFile=0x344) returned 0x1 [0157.698] WriteFile (in: hFile=0x344, lpBuffer=0x28a4eb8*, nNumberOfBytesToWrite=0xc430, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28a4eb8*, lpNumberOfBytesWritten=0x12dd18*=0xc430, lpOverlapped=0x0) returned 1 [0157.700] CloseHandle (hObject=0x344) returned 1 [0157.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png", lpFilePart=0x0) returned 0x40 [0157.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png.SYMMYWARE", lpFilePart=0x0) returned 0x4a [0157.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x123a8b40, ftCreationTime.dwHighDateTime=0x1d5e7d3, ftLastAccessTime.dwLowDateTime=0x3595bff0, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0xbcb3770, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc430)) returned 1 [0157.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0157.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\QcQF.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\qcqf.png.symmyware")) returned 1 [0157.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd", lpFilePart=0x0) returned 0x46 [0157.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\", lpFilePart=0x0) returned 0x47 [0157.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.705] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aaea1c0, ftCreationTime.dwHighDateTime=0x1d5e188, ftLastAccessTime.dwLowDateTime=0x4ef30470, ftLastAccessTime.dwHighDateTime=0x1d5e78a, ftLastWriteTime.dwLowDateTime=0x4ef30470, ftLastWriteTime.dwHighDateTime=0x1d5e78a, nFileSizeHigh=0x0, nFileSizeLow=0x14319, dwReserved0=0x0, dwReserved1=0x0, cFileName="5MEm5i.png", cAlternateFileName="")) returned 1 [0157.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036ecc0, ftCreationTime.dwHighDateTime=0x1d5e30f, ftLastAccessTime.dwLowDateTime=0xdcb22960, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0xdcb22960, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x117ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KyJQtb1LF5VKwOEt.bmp", cAlternateFileName="8KYJQT~1.BMP")) returned 1 [0157.706] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43c3870, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0x2be5a00, ftLastAccessTime.dwHighDateTime=0x1d5e627, ftLastWriteTime.dwLowDateTime=0x2be5a00, ftLastWriteTime.dwHighDateTime=0x1d5e627, nFileSizeHigh=0x0, nFileSizeLow=0xf3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aHy7j 1_C 9n.png", cAlternateFileName="AHY7J1~1.PNG")) returned 1 [0157.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391ab90, ftCreationTime.dwHighDateTime=0x1d5da1e, ftLastAccessTime.dwLowDateTime=0x54d8d790, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x54d8d790, ftLastWriteTime.dwHighDateTime=0x1d5dd10, nFileSizeHigh=0x0, nFileSizeLow=0x2c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTkVHVZAlCPqk vdXB.bmp", cAlternateFileName="CTKVHV~1.BMP")) returned 1 [0157.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57179970, ftCreationTime.dwHighDateTime=0x1d5e462, ftLastAccessTime.dwLowDateTime=0x469a9c30, ftLastAccessTime.dwHighDateTime=0x1d5e2c5, ftLastWriteTime.dwLowDateTime=0x469a9c30, ftLastWriteTime.dwHighDateTime=0x1d5e2c5, nFileSizeHigh=0x0, nFileSizeLow=0xaa93, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhVat.jpg", cAlternateFileName="")) returned 1 [0157.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf80f900, ftCreationTime.dwHighDateTime=0x1d5e553, ftLastAccessTime.dwLowDateTime=0x91dc4c30, ftLastAccessTime.dwHighDateTime=0x1d5d7d4, ftLastWriteTime.dwLowDateTime=0x91dc4c30, ftLastWriteTime.dwHighDateTime=0x1d5d7d4, nFileSizeHigh=0x0, nFileSizeLow=0x14ab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNj_MfXJDBnJ9b.bmp", cAlternateFileName="PNJ_MF~1.BMP")) returned 1 [0157.707] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa698260, ftCreationTime.dwHighDateTime=0x1d5e5f6, ftLastAccessTime.dwLowDateTime=0xd3f863d0, ftLastAccessTime.dwHighDateTime=0x1d5e0d3, ftLastWriteTime.dwLowDateTime=0xd3f863d0, ftLastWriteTime.dwHighDateTime=0x1d5e0d3, nFileSizeHigh=0x0, nFileSizeLow=0xca8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="w cDtOOlmWE.bmp", cAlternateFileName="WCDTOO~1.BMP")) returned 1 [0157.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7cbae0, ftCreationTime.dwHighDateTime=0x1d5e7e1, ftLastAccessTime.dwLowDateTime=0x7adf0d00, ftLastAccessTime.dwHighDateTime=0x1d5e7b6, ftLastWriteTime.dwLowDateTime=0x7adf0d00, ftLastWriteTime.dwHighDateTime=0x1d5e7b6, nFileSizeHigh=0x0, nFileSizeLow=0x455d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCLIhfa.gif", cAlternateFileName="")) returned 1 [0157.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06c2c0, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0x4055bfd0, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0x4055bfd0, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0xe0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_cGr kOjC.bmp", cAlternateFileName="_CGRKO~1.BMP")) returned 1 [0157.708] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.708] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0157.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0157.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0157.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd", lpFilePart=0x0) returned 0x46 [0157.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\", lpFilePart=0x0) returned 0x47 [0157.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0157.709] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf652f470, ftCreationTime.dwHighDateTime=0x1d5e5e9, ftLastAccessTime.dwLowDateTime=0x98cfb9c0, ftLastAccessTime.dwHighDateTime=0x1d5e38a, ftLastWriteTime.dwLowDateTime=0x98cfb9c0, ftLastWriteTime.dwHighDateTime=0x1d5e38a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aaea1c0, ftCreationTime.dwHighDateTime=0x1d5e188, ftLastAccessTime.dwLowDateTime=0x4ef30470, ftLastAccessTime.dwHighDateTime=0x1d5e78a, ftLastWriteTime.dwLowDateTime=0x4ef30470, ftLastWriteTime.dwHighDateTime=0x1d5e78a, nFileSizeHigh=0x0, nFileSizeLow=0x14319, dwReserved0=0x0, dwReserved1=0x0, cFileName="5MEm5i.png", cAlternateFileName="")) returned 1 [0157.710] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7036ecc0, ftCreationTime.dwHighDateTime=0x1d5e30f, ftLastAccessTime.dwLowDateTime=0xdcb22960, ftLastAccessTime.dwHighDateTime=0x1d5e76e, ftLastWriteTime.dwLowDateTime=0xdcb22960, ftLastWriteTime.dwHighDateTime=0x1d5e76e, nFileSizeHigh=0x0, nFileSizeLow=0x117ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KyJQtb1LF5VKwOEt.bmp", cAlternateFileName="8KYJQT~1.BMP")) returned 1 [0157.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43c3870, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0x2be5a00, ftLastAccessTime.dwHighDateTime=0x1d5e627, ftLastWriteTime.dwLowDateTime=0x2be5a00, ftLastWriteTime.dwHighDateTime=0x1d5e627, nFileSizeHigh=0x0, nFileSizeLow=0xf3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aHy7j 1_C 9n.png", cAlternateFileName="AHY7J1~1.PNG")) returned 1 [0157.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391ab90, ftCreationTime.dwHighDateTime=0x1d5da1e, ftLastAccessTime.dwLowDateTime=0x54d8d790, ftLastAccessTime.dwHighDateTime=0x1d5dd10, ftLastWriteTime.dwLowDateTime=0x54d8d790, ftLastWriteTime.dwHighDateTime=0x1d5dd10, nFileSizeHigh=0x0, nFileSizeLow=0x2c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTkVHVZAlCPqk vdXB.bmp", cAlternateFileName="CTKVHV~1.BMP")) returned 1 [0157.711] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57179970, ftCreationTime.dwHighDateTime=0x1d5e462, ftLastAccessTime.dwLowDateTime=0x469a9c30, ftLastAccessTime.dwHighDateTime=0x1d5e2c5, ftLastWriteTime.dwLowDateTime=0x469a9c30, ftLastWriteTime.dwHighDateTime=0x1d5e2c5, nFileSizeHigh=0x0, nFileSizeLow=0xaa93, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhVat.jpg", cAlternateFileName="")) returned 1 [0157.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf80f900, ftCreationTime.dwHighDateTime=0x1d5e553, ftLastAccessTime.dwLowDateTime=0x91dc4c30, ftLastAccessTime.dwHighDateTime=0x1d5d7d4, ftLastWriteTime.dwLowDateTime=0x91dc4c30, ftLastWriteTime.dwHighDateTime=0x1d5d7d4, nFileSizeHigh=0x0, nFileSizeLow=0x14ab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNj_MfXJDBnJ9b.bmp", cAlternateFileName="PNJ_MF~1.BMP")) returned 1 [0157.712] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa698260, ftCreationTime.dwHighDateTime=0x1d5e5f6, ftLastAccessTime.dwLowDateTime=0xd3f863d0, ftLastAccessTime.dwHighDateTime=0x1d5e0d3, ftLastWriteTime.dwLowDateTime=0xd3f863d0, ftLastWriteTime.dwHighDateTime=0x1d5e0d3, nFileSizeHigh=0x0, nFileSizeLow=0xca8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="w cDtOOlmWE.bmp", cAlternateFileName="WCDTOO~1.BMP")) returned 1 [0157.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7cbae0, ftCreationTime.dwHighDateTime=0x1d5e7e1, ftLastAccessTime.dwLowDateTime=0x7adf0d00, ftLastAccessTime.dwHighDateTime=0x1d5e7b6, ftLastWriteTime.dwLowDateTime=0x7adf0d00, ftLastWriteTime.dwHighDateTime=0x1d5e7b6, nFileSizeHigh=0x0, nFileSizeLow=0x455d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCLIhfa.gif", cAlternateFileName="")) returned 1 [0157.713] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06c2c0, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0x4055bfd0, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0x4055bfd0, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0xe0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_cGr kOjC.bmp", cAlternateFileName="_CGRKO~1.BMP")) returned 1 [0157.714] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06c2c0, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0x4055bfd0, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0x4055bfd0, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0xe0e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_cGr kOjC.bmp", cAlternateFileName="_CGRKO~1.BMP")) returned 0 [0157.714] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0157.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0157.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0157.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", lpFilePart=0x0) returned 0x51 [0157.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.715] GetFileType (hFile=0x344) returned 0x1 [0157.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.715] GetFileType (hFile=0x344) returned 0x1 [0157.715] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x14319 [0157.715] ReadFile (in: hFile=0x344, lpBuffer=0x28b8a30, nNumberOfBytesToRead=0x14319, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x28b8a30*, lpNumberOfBytesRead=0x12dc38*=0x14319, lpOverlapped=0x0) returned 1 [0157.718] CloseHandle (hObject=0x344) returned 1 [0157.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", lpFilePart=0x0) returned 0x51 [0157.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0157.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.879] GetFileType (hFile=0x344) returned 0x1 [0157.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0157.879] GetFileType (hFile=0x344) returned 0x1 [0157.879] WriteFile (in: hFile=0x344, lpBuffer=0x276f3b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x276f3b8*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0157.881] CloseHandle (hObject=0x344) returned 1 [0157.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", lpFilePart=0x0) returned 0x51 [0157.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.882] GetFileType (hFile=0x344) returned 0x1 [0157.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.883] GetFileType (hFile=0x344) returned 0x1 [0157.883] WriteFile (in: hFile=0x344, lpBuffer=0x2759a08*, nNumberOfBytesToWrite=0x14320, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x2759a08*, lpNumberOfBytesWritten=0x12dc98*=0x14320, lpOverlapped=0x0) returned 1 [0157.886] CloseHandle (hObject=0x344) returned 1 [0157.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png", lpFilePart=0x0) returned 0x51 [0157.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png.SYMMYWARE", lpFilePart=0x0) returned 0x5b [0157.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aaea1c0, ftCreationTime.dwHighDateTime=0x1d5e188, ftLastAccessTime.dwLowDateTime=0x4ef30470, ftLastAccessTime.dwHighDateTime=0x1d5e78a, ftLastWriteTime.dwLowDateTime=0xbe54f20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14320)) returned 1 [0157.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0157.889] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\5MEm5i.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\5mem5i.png.symmyware")) returned 1 [0157.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", lpFilePart=0x0) returned 0x57 [0157.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.891] GetFileType (hFile=0x344) returned 0x1 [0157.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.891] GetFileType (hFile=0x344) returned 0x1 [0157.891] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xf3b0 [0157.891] ReadFile (in: hFile=0x344, lpBuffer=0x2770988, nNumberOfBytesToRead=0xf3b0, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2770988*, lpNumberOfBytesRead=0x12dc38*=0xf3b0, lpOverlapped=0x0) returned 1 [0157.893] CloseHandle (hObject=0x344) returned 1 [0157.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", lpFilePart=0x0) returned 0x57 [0157.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0157.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.911] GetFileType (hFile=0x344) returned 0x1 [0157.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0157.911] GetFileType (hFile=0x344) returned 0x1 [0157.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", lpFilePart=0x0) returned 0x57 [0157.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.913] GetFileType (hFile=0x344) returned 0x1 [0157.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.914] GetFileType (hFile=0x344) returned 0x1 [0157.914] WriteFile (in: hFile=0x344, lpBuffer=0x27ed548*, nNumberOfBytesToWrite=0xf3c0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x27ed548*, lpNumberOfBytesWritten=0x12dc98*=0xf3c0, lpOverlapped=0x0) returned 1 [0157.935] CloseHandle (hObject=0x344) returned 1 [0157.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png", lpFilePart=0x0) returned 0x57 [0157.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png.SYMMYWARE", lpFilePart=0x0) returned 0x61 [0157.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43c3870, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0x2be5a00, ftLastAccessTime.dwHighDateTime=0x1d5e627, ftLastWriteTime.dwLowDateTime=0xbea7f40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xf3c0)) returned 1 [0157.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0157.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\aHy7j 1_C 9n.png.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\ahy7j 1_c 9n.png.symmyware")) returned 1 [0157.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", lpFilePart=0x0) returned 0x50 [0157.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.940] GetFileType (hFile=0x344) returned 0x1 [0157.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.940] GetFileType (hFile=0x344) returned 0x1 [0157.940] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0xaa93 [0157.941] ReadFile (in: hFile=0x344, lpBuffer=0x27ff5a8, nNumberOfBytesToRead=0xaa93, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x27ff5a8*, lpNumberOfBytesRead=0x12dc38*=0xaa93, lpOverlapped=0x0) returned 1 [0157.942] CloseHandle (hObject=0x344) returned 1 [0157.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", lpFilePart=0x0) returned 0x50 [0157.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0157.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.959] GetFileType (hFile=0x344) returned 0x1 [0157.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0157.959] GetFileType (hFile=0x344) returned 0x1 [0157.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", lpFilePart=0x0) returned 0x50 [0157.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0157.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0157.962] GetFileType (hFile=0x344) returned 0x1 [0157.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0157.962] GetFileType (hFile=0x344) returned 0x1 [0157.962] WriteFile (in: hFile=0x344, lpBuffer=0x286e428*, nNumberOfBytesToWrite=0xaaa0, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x286e428*, lpNumberOfBytesWritten=0x12dc98*=0xaaa0, lpOverlapped=0x0) returned 1 [0157.964] CloseHandle (hObject=0x344) returned 1 [0157.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg", lpFilePart=0x0) returned 0x50 [0157.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0157.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0157.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57179970, ftCreationTime.dwHighDateTime=0x1d5e462, ftLastAccessTime.dwLowDateTime=0x469a9c30, ftLastAccessTime.dwHighDateTime=0x1d5e2c5, ftLastWriteTime.dwLowDateTime=0xbeec500, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xaaa0)) returned 1 [0157.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0157.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\DhVat.jpg.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\dhvat.jpg.symmyware")) returned 1 [0157.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x54 [0157.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0157.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\wFM81DGGaIpMTd\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\wfm81dggaipmtd\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.980] GetFileType (hFile=0x344) returned 0x1 [0157.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0157.980] GetFileType (hFile=0x344) returned 0x1 [0157.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0157.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0157.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PyAM_gKCYeDWLGX0\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pyam_gkcyedwlgx0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.983] GetFileType (hFile=0x344) returned 0x1 [0157.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0157.983] GetFileType (hFile=0x344) returned 0x1 [0157.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0157.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0157.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.985] GetFileType (hFile=0x344) returned 0x1 [0157.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0157.986] GetFileType (hFile=0x344) returned 0x1 [0157.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.987] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0157.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", lpFilePart=0x0) returned 0x28 [0157.988] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0157.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0157.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0157.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0157.994] GetFileType (hFile=0x344) returned 0x1 [0157.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0157.994] GetFileType (hFile=0x344) returned 0x1 [0157.995] WriteFile (in: hFile=0x344, lpBuffer=0x28887a0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28887a0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0157.996] CloseHandle (hObject=0x344) returned 1 [0157.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0157.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0157.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", lpFilePart=0x0) returned 0x25 [0157.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0158.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0158.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.004] GetFileType (hFile=0x344) returned 0x1 [0158.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.004] GetFileType (hFile=0x344) returned 0x1 [0158.005] WriteFile (in: hFile=0x344, lpBuffer=0x288cd28*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x288cd28*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.006] CloseHandle (hObject=0x344) returned 1 [0158.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0158.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0158.007] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.008] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.011] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.012] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.012] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0158.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0158.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.037] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.038] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0158.038] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0158.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.040] GetFileType (hFile=0x344) returned 0x1 [0158.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.040] GetFileType (hFile=0x344) returned 0x1 [0158.040] WriteFile (in: hFile=0x344, lpBuffer=0x2891e48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2891e48*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.042] CloseHandle (hObject=0x344) returned 1 [0158.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0158.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0158.042] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.042] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0158.043] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0158.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.044] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0158.044] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0158.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.044] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0158.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0158.045] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0158.046] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0158.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.047] GetFileType (hFile=0x344) returned 0x1 [0158.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.047] GetFileType (hFile=0x344) returned 0x1 [0158.049] WriteFile (in: hFile=0x344, lpBuffer=0x28977c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28977c0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.050] CloseHandle (hObject=0x344) returned 1 [0158.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0158.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", lpFilePart=0x0) returned 0x25 [0158.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0158.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0158.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.059] GetFileType (hFile=0x344) returned 0x1 [0158.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.060] GetFileType (hFile=0x344) returned 0x1 [0158.060] WriteFile (in: hFile=0x344, lpBuffer=0x289bd48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x289bd48*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.062] CloseHandle (hObject=0x344) returned 1 [0158.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0158.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", lpFilePart=0x0) returned 0x29 [0158.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0158.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0158.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.069] GetFileType (hFile=0x344) returned 0x1 [0158.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.069] GetFileType (hFile=0x344) returned 0x1 [0158.069] WriteFile (in: hFile=0x344, lpBuffer=0x28a0330*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28a0330*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.080] CloseHandle (hObject=0x344) returned 1 [0158.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0158.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", lpFilePart=0x0) returned 0x28 [0158.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0158.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0158.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0158.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0158.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.087] GetFileType (hFile=0x344) returned 0x1 [0158.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0158.087] GetFileType (hFile=0x344) returned 0x1 [0158.088] WriteFile (in: hFile=0x344, lpBuffer=0x28a4900*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28a4900*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0158.089] CloseHandle (hObject=0x344) returned 1 [0158.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0158.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0158.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b2720, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.090] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b2720, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.091] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.091] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a6a40, ftCreationTime.dwHighDateTime=0x1d5dea9, ftLastAccessTime.dwLowDateTime=0x915c2f50, ftLastAccessTime.dwHighDateTime=0x1d5e7f1, ftLastWriteTime.dwLowDateTime=0x915c2f50, ftLastWriteTime.dwHighDateTime=0x1d5e7f1, nFileSizeHigh=0x0, nFileSizeLow=0x18551, dwReserved0=0x0, dwReserved1=0x0, cFileName="JlfNIAExQIeBZ4JvO7q.avi", cAlternateFileName="JLFNIA~1.AVI")) returned 1 [0158.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="N_ kGmP-m6Q6Jm", cAlternateFileName="N_KGMP~1")) returned 1 [0158.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800fd730, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xb2033320, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0xb2033320, ftLastWriteTime.dwHighDateTime=0x1d5e46d, nFileSizeHigh=0x0, nFileSizeLow=0x150c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QkX WWSScY3CYz.swf", cAlternateFileName="QKXWWS~1.SWF")) returned 1 [0158.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2720, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b9c50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0158.092] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5207bb80, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0xb7d45500, ftLastAccessTime.dwHighDateTime=0x1d5dd91, ftLastWriteTime.dwLowDateTime=0xb7d45500, ftLastWriteTime.dwHighDateTime=0x1d5dd91, nFileSizeHigh=0x0, nFileSizeLow=0xa9fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SypAoP.mp4", cAlternateFileName="")) returned 1 [0158.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wCDfqU5REgrHg86F", cAlternateFileName="WCDFQU~1")) returned 1 [0158.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657e90f0, ftCreationTime.dwHighDateTime=0x1d5e0ba, ftLastAccessTime.dwLowDateTime=0x42764d10, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0x42764d10, ftLastWriteTime.dwHighDateTime=0x1d5ddc6, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yecuzaxb-irw2Yhn.swf", cAlternateFileName="YECUZA~1.SWF")) returned 1 [0158.093] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.093] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0158.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0158.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0158.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b2720, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b2720, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.095] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a6a40, ftCreationTime.dwHighDateTime=0x1d5dea9, ftLastAccessTime.dwLowDateTime=0x915c2f50, ftLastAccessTime.dwHighDateTime=0x1d5e7f1, ftLastWriteTime.dwLowDateTime=0x915c2f50, ftLastWriteTime.dwHighDateTime=0x1d5e7f1, nFileSizeHigh=0x0, nFileSizeLow=0x18551, dwReserved0=0x0, dwReserved1=0x0, cFileName="JlfNIAExQIeBZ4JvO7q.avi", cAlternateFileName="JLFNIA~1.AVI")) returned 1 [0158.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="N_ kGmP-m6Q6Jm", cAlternateFileName="N_KGMP~1")) returned 1 [0158.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800fd730, ftCreationTime.dwHighDateTime=0x1d5de1c, ftLastAccessTime.dwLowDateTime=0xb2033320, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0xb2033320, ftLastWriteTime.dwHighDateTime=0x1d5e46d, nFileSizeHigh=0x0, nFileSizeLow=0x150c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="QkX WWSScY3CYz.swf", cAlternateFileName="QKXWWS~1.SWF")) returned 1 [0158.096] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b2720, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xa4b2720, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xa4b9c50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0158.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5207bb80, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0xb7d45500, ftLastAccessTime.dwHighDateTime=0x1d5dd91, ftLastWriteTime.dwLowDateTime=0xb7d45500, ftLastWriteTime.dwHighDateTime=0x1d5dd91, nFileSizeHigh=0x0, nFileSizeLow=0xa9fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SypAoP.mp4", cAlternateFileName="")) returned 1 [0158.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wCDfqU5REgrHg86F", cAlternateFileName="WCDFQU~1")) returned 1 [0158.097] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657e90f0, ftCreationTime.dwHighDateTime=0x1d5e0ba, ftLastAccessTime.dwLowDateTime=0x42764d10, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0x42764d10, ftLastWriteTime.dwHighDateTime=0x1d5ddc6, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yecuzaxb-irw2Yhn.swf", cAlternateFileName="YECUZA~1.SWF")) returned 1 [0158.098] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657e90f0, ftCreationTime.dwHighDateTime=0x1d5e0ba, ftLastAccessTime.dwLowDateTime=0x42764d10, ftLastAccessTime.dwHighDateTime=0x1d5ddc6, ftLastWriteTime.dwLowDateTime=0x42764d10, ftLastWriteTime.dwHighDateTime=0x1d5ddc6, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yecuzaxb-irw2Yhn.swf", cAlternateFileName="YECUZA~1.SWF")) returned 0 [0158.098] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0158.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0158.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", lpFilePart=0x0) returned 0x3c [0158.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.099] GetFileType (hFile=0x344) returned 0x1 [0158.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0158.099] GetFileType (hFile=0x344) returned 0x1 [0158.099] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x18551 [0158.100] ReadFile (in: hFile=0x344, lpBuffer=0x128a5120, nNumberOfBytesToRead=0x18551, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x128a5120*, lpNumberOfBytesRead=0x12dd38*=0x18551, lpOverlapped=0x0) returned 1 [0158.106] CloseHandle (hObject=0x344) returned 1 [0158.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", lpFilePart=0x0) returned 0x3c [0158.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0158.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.193] GetFileType (hFile=0x344) returned 0x1 [0158.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0158.193] GetFileType (hFile=0x344) returned 0x1 [0158.193] WriteFile (in: hFile=0x344, lpBuffer=0x28f9788*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x28f9788*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0158.195] CloseHandle (hObject=0x344) returned 1 [0158.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", lpFilePart=0x0) returned 0x3c [0158.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.196] GetFileType (hFile=0x344) returned 0x1 [0158.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0158.196] GetFileType (hFile=0x344) returned 0x1 [0158.196] WriteFile (in: hFile=0x344, lpBuffer=0x1291ec98*, nNumberOfBytesToWrite=0x18560, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x1291ec98*, lpNumberOfBytesWritten=0x12dd98*=0x18560, lpOverlapped=0x0) returned 1 [0158.199] CloseHandle (hObject=0x344) returned 1 [0158.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi", lpFilePart=0x0) returned 0x3c [0158.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi.SYMMYWARE", lpFilePart=0x0) returned 0x46 [0158.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0158.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a6a40, ftCreationTime.dwHighDateTime=0x1d5dea9, ftLastAccessTime.dwLowDateTime=0x915c2f50, ftLastAccessTime.dwHighDateTime=0x1d5e7f1, ftLastWriteTime.dwLowDateTime=0xc10f300, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x18560)) returned 1 [0158.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0158.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JlfNIAExQIeBZ4JvO7q.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jlfniaexqiebz4jvo7q.avi.symmyware")) returned 1 [0158.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", lpFilePart=0x0) returned 0x2f [0158.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.202] GetFileType (hFile=0x344) returned 0x1 [0158.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0158.202] GetFileType (hFile=0x344) returned 0x1 [0158.202] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0xa9fb [0158.203] ReadFile (in: hFile=0x344, lpBuffer=0x28fac98, nNumberOfBytesToRead=0xa9fb, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x28fac98*, lpNumberOfBytesRead=0x12dd38*=0xa9fb, lpOverlapped=0x0) returned 1 [0158.205] CloseHandle (hObject=0x344) returned 1 [0158.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", lpFilePart=0x0) returned 0x2f [0158.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0158.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.328] GetFileType (hFile=0x344) returned 0x1 [0158.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0158.328] GetFileType (hFile=0x344) returned 0x1 [0158.329] WriteFile (in: hFile=0x344, lpBuffer=0x276bdd0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12dbf8, lpOverlapped=0x0 | out: lpBuffer=0x276bdd0*, lpNumberOfBytesWritten=0x12dbf8*=0x36, lpOverlapped=0x0) returned 1 [0158.330] CloseHandle (hObject=0x344) returned 1 [0158.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", lpFilePart=0x0) returned 0x2f [0158.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.333] GetFileType (hFile=0x344) returned 0x1 [0158.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0158.333] GetFileType (hFile=0x344) returned 0x1 [0158.333] WriteFile (in: hFile=0x344, lpBuffer=0x275fd88*, nNumberOfBytesToWrite=0xaa00, lpNumberOfBytesWritten=0x12dd98, lpOverlapped=0x0 | out: lpBuffer=0x275fd88*, lpNumberOfBytesWritten=0x12dd98*=0xaa00, lpOverlapped=0x0) returned 1 [0158.335] CloseHandle (hObject=0x344) returned 1 [0158.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4", lpFilePart=0x0) returned 0x2f [0158.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x39 [0158.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0158.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5207bb80, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0xb7d45500, ftLastAccessTime.dwHighDateTime=0x1d5dd91, ftLastWriteTime.dwLowDateTime=0xc2453f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xaa00)) returned 1 [0158.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0158.336] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SypAoP.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sypaop.mp4.symmyware")) returned 1 [0158.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0158.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm", lpFilePart=0x0) returned 0x33 [0158.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\", lpFilePart=0x0) returned 0x34 [0158.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0pUrkp-xNlbZrfPeQ x", cAlternateFileName="0PURKP~1")) returned 1 [0158.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d781a80, ftCreationTime.dwHighDateTime=0x1d5e55d, ftLastAccessTime.dwLowDateTime=0x58b1fc90, ftLastAccessTime.dwHighDateTime=0x1d5db6f, ftLastWriteTime.dwLowDateTime=0x58b1fc90, ftLastWriteTime.dwHighDateTime=0x1d5db6f, nFileSizeHigh=0x0, nFileSizeLow=0x14ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="1P7NtL1v6Dv.flv", cAlternateFileName="1P7NTL~1.FLV")) returned 1 [0158.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906cc000, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0xed5533a0, ftLastAccessTime.dwHighDateTime=0x1d5e7f7, ftLastWriteTime.dwLowDateTime=0xed5533a0, ftLastWriteTime.dwHighDateTime=0x1d5e7f7, nFileSizeHigh=0x0, nFileSizeLow=0x1406e, dwReserved0=0x0, dwReserved1=0x0, cFileName="3yW-Wh.mkv", cAlternateFileName="")) returned 1 [0158.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1eff280, ftCreationTime.dwHighDateTime=0x1d5da7e, ftLastAccessTime.dwLowDateTime=0xe73a5b30, ftLastAccessTime.dwHighDateTime=0x1d5dd93, ftLastWriteTime.dwLowDateTime=0xe73a5b30, ftLastWriteTime.dwHighDateTime=0x1d5dd93, nFileSizeHigh=0x0, nFileSizeLow=0x3284, dwReserved0=0x0, dwReserved1=0x0, cFileName="8HgSFlH55NRP6tcos3.avi", cAlternateFileName="8HGSFL~1.AVI")) returned 1 [0158.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89daf3d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0x7a25ba70, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0x7a25ba70, ftLastWriteTime.dwHighDateTime=0x1d5e73a, nFileSizeHigh=0x0, nFileSizeLow=0xe7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FItRK2gWYnf.flv", cAlternateFileName="FITRK2~1.FLV")) returned 1 [0158.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9704d60, ftCreationTime.dwHighDateTime=0x1d5e53b, ftLastAccessTime.dwLowDateTime=0x93e9e140, ftLastAccessTime.dwHighDateTime=0x1d5e31e, ftLastWriteTime.dwLowDateTime=0x93e9e140, ftLastWriteTime.dwHighDateTime=0x1d5e31e, nFileSizeHigh=0x0, nFileSizeLow=0xe340, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJNpPargRyXkFwYrzPwD.flv", cAlternateFileName="LJNPPA~1.FLV")) returned 1 [0158.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36cbae70, ftCreationTime.dwHighDateTime=0x1d5d802, ftLastAccessTime.dwLowDateTime=0xcf479ad0, ftLastAccessTime.dwHighDateTime=0x1d5da21, ftLastWriteTime.dwLowDateTime=0xcf479ad0, ftLastWriteTime.dwHighDateTime=0x1d5da21, nFileSizeHigh=0x0, nFileSizeLow=0x1059, dwReserved0=0x0, dwReserved1=0x0, cFileName="mIc2iJcfFCz1qitpC1UC.avi", cAlternateFileName="MIC2IJ~1.AVI")) returned 1 [0158.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab6cc70, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x640180b0, ftLastAccessTime.dwHighDateTime=0x1d5deb3, ftLastWriteTime.dwLowDateTime=0x640180b0, ftLastWriteTime.dwHighDateTime=0x1d5deb3, nFileSizeHigh=0x0, nFileSizeLow=0x9c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_Ba5xynTB5KO49X4LVi.flv", cAlternateFileName="W_BA5X~1.FLV")) returned 1 [0158.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405f2980, ftCreationTime.dwHighDateTime=0x1d5e27f, ftLastAccessTime.dwLowDateTime=0xc55337a0, ftLastAccessTime.dwHighDateTime=0x1d5e156, ftLastWriteTime.dwLowDateTime=0xc55337a0, ftLastWriteTime.dwHighDateTime=0x1d5e156, nFileSizeHigh=0x0, nFileSizeLow=0xd71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YuOe_HHC5YLOFvy.mkv", cAlternateFileName="YUOE_H~1.MKV")) returned 1 [0158.340] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.340] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0158.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0158.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0158.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm", lpFilePart=0x0) returned 0x33 [0158.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\", lpFilePart=0x0) returned 0x34 [0158.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da927e0, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0xa3362460, ftLastAccessTime.dwHighDateTime=0x1d5dee1, ftLastWriteTime.dwLowDateTime=0xa3362460, ftLastWriteTime.dwHighDateTime=0x1d5dee1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0pUrkp-xNlbZrfPeQ x", cAlternateFileName="0PURKP~1")) returned 1 [0158.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d781a80, ftCreationTime.dwHighDateTime=0x1d5e55d, ftLastAccessTime.dwLowDateTime=0x58b1fc90, ftLastAccessTime.dwHighDateTime=0x1d5db6f, ftLastWriteTime.dwLowDateTime=0x58b1fc90, ftLastWriteTime.dwHighDateTime=0x1d5db6f, nFileSizeHigh=0x0, nFileSizeLow=0x14ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="1P7NtL1v6Dv.flv", cAlternateFileName="1P7NTL~1.FLV")) returned 1 [0158.341] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906cc000, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0xed5533a0, ftLastAccessTime.dwHighDateTime=0x1d5e7f7, ftLastWriteTime.dwLowDateTime=0xed5533a0, ftLastWriteTime.dwHighDateTime=0x1d5e7f7, nFileSizeHigh=0x0, nFileSizeLow=0x1406e, dwReserved0=0x0, dwReserved1=0x0, cFileName="3yW-Wh.mkv", cAlternateFileName="")) returned 1 [0158.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1eff280, ftCreationTime.dwHighDateTime=0x1d5da7e, ftLastAccessTime.dwLowDateTime=0xe73a5b30, ftLastAccessTime.dwHighDateTime=0x1d5dd93, ftLastWriteTime.dwLowDateTime=0xe73a5b30, ftLastWriteTime.dwHighDateTime=0x1d5dd93, nFileSizeHigh=0x0, nFileSizeLow=0x3284, dwReserved0=0x0, dwReserved1=0x0, cFileName="8HgSFlH55NRP6tcos3.avi", cAlternateFileName="8HGSFL~1.AVI")) returned 1 [0158.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89daf3d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0x7a25ba70, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0x7a25ba70, ftLastWriteTime.dwHighDateTime=0x1d5e73a, nFileSizeHigh=0x0, nFileSizeLow=0xe7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FItRK2gWYnf.flv", cAlternateFileName="FITRK2~1.FLV")) returned 1 [0158.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9704d60, ftCreationTime.dwHighDateTime=0x1d5e53b, ftLastAccessTime.dwLowDateTime=0x93e9e140, ftLastAccessTime.dwHighDateTime=0x1d5e31e, ftLastWriteTime.dwLowDateTime=0x93e9e140, ftLastWriteTime.dwHighDateTime=0x1d5e31e, nFileSizeHigh=0x0, nFileSizeLow=0xe340, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJNpPargRyXkFwYrzPwD.flv", cAlternateFileName="LJNPPA~1.FLV")) returned 1 [0158.342] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36cbae70, ftCreationTime.dwHighDateTime=0x1d5d802, ftLastAccessTime.dwLowDateTime=0xcf479ad0, ftLastAccessTime.dwHighDateTime=0x1d5da21, ftLastWriteTime.dwLowDateTime=0xcf479ad0, ftLastWriteTime.dwHighDateTime=0x1d5da21, nFileSizeHigh=0x0, nFileSizeLow=0x1059, dwReserved0=0x0, dwReserved1=0x0, cFileName="mIc2iJcfFCz1qitpC1UC.avi", cAlternateFileName="MIC2IJ~1.AVI")) returned 1 [0158.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab6cc70, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x640180b0, ftLastAccessTime.dwHighDateTime=0x1d5deb3, ftLastWriteTime.dwLowDateTime=0x640180b0, ftLastWriteTime.dwHighDateTime=0x1d5deb3, nFileSizeHigh=0x0, nFileSizeLow=0x9c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_Ba5xynTB5KO49X4LVi.flv", cAlternateFileName="W_BA5X~1.FLV")) returned 1 [0158.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405f2980, ftCreationTime.dwHighDateTime=0x1d5e27f, ftLastAccessTime.dwLowDateTime=0xc55337a0, ftLastAccessTime.dwHighDateTime=0x1d5e156, ftLastWriteTime.dwLowDateTime=0xc55337a0, ftLastWriteTime.dwHighDateTime=0x1d5e156, nFileSizeHigh=0x0, nFileSizeLow=0xd71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YuOe_HHC5YLOFvy.mkv", cAlternateFileName="YUOE_H~1.MKV")) returned 1 [0158.343] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405f2980, ftCreationTime.dwHighDateTime=0x1d5e27f, ftLastAccessTime.dwLowDateTime=0xc55337a0, ftLastAccessTime.dwHighDateTime=0x1d5e156, ftLastWriteTime.dwLowDateTime=0xc55337a0, ftLastWriteTime.dwHighDateTime=0x1d5e156, nFileSizeHigh=0x0, nFileSizeLow=0xd71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YuOe_HHC5YLOFvy.mkv", cAlternateFileName="YUOE_H~1.MKV")) returned 0 [0158.343] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0158.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0158.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", lpFilePart=0x0) returned 0x43 [0158.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.344] GetFileType (hFile=0x344) returned 0x1 [0158.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.344] GetFileType (hFile=0x344) returned 0x1 [0158.344] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x14ae [0158.344] ReadFile (in: hFile=0x344, lpBuffer=0x27716b8, nNumberOfBytesToRead=0x14ae, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27716b8*, lpNumberOfBytesRead=0x12dcb8*=0x14ae, lpOverlapped=0x0) returned 1 [0158.345] CloseHandle (hObject=0x344) returned 1 [0158.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", lpFilePart=0x0) returned 0x43 [0158.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.360] GetFileType (hFile=0x344) returned 0x1 [0158.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.360] GetFileType (hFile=0x344) returned 0x1 [0158.360] WriteFile (in: hFile=0x344, lpBuffer=0x27c99d0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27c99d0*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.396] CloseHandle (hObject=0x344) returned 1 [0158.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", lpFilePart=0x0) returned 0x43 [0158.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.402] GetFileType (hFile=0x344) returned 0x1 [0158.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.402] GetFileType (hFile=0x344) returned 0x1 [0158.402] WriteFile (in: hFile=0x344, lpBuffer=0x27c6ea8*, nNumberOfBytesToWrite=0x14b0, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x27c6ea8*, lpNumberOfBytesWritten=0x12dd18*=0x14b0, lpOverlapped=0x0) returned 1 [0158.407] CloseHandle (hObject=0x344) returned 1 [0158.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv", lpFilePart=0x0) returned 0x43 [0158.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0158.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d781a80, ftCreationTime.dwHighDateTime=0x1d5e55d, ftLastAccessTime.dwLowDateTime=0x58b1fc90, ftLastAccessTime.dwHighDateTime=0x1d5db6f, ftLastWriteTime.dwLowDateTime=0xc2edb40, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x14b0)) returned 1 [0158.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.407] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\1P7NtL1v6Dv.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\1p7ntl1v6dv.flv.symmyware")) returned 1 [0158.409] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", lpFilePart=0x0) returned 0x4a [0158.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.409] GetFileType (hFile=0x344) returned 0x1 [0158.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.409] GetFileType (hFile=0x344) returned 0x1 [0158.409] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x3284 [0158.409] ReadFile (in: hFile=0x344, lpBuffer=0x27caf28, nNumberOfBytesToRead=0x3284, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27caf28*, lpNumberOfBytesRead=0x12dcb8*=0x3284, lpOverlapped=0x0) returned 1 [0158.411] CloseHandle (hObject=0x344) returned 1 [0158.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", lpFilePart=0x0) returned 0x4a [0158.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.460] GetFileType (hFile=0x344) returned 0x1 [0158.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.460] GetFileType (hFile=0x344) returned 0x1 [0158.460] WriteFile (in: hFile=0x344, lpBuffer=0x282e3b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x282e3b8*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.461] CloseHandle (hObject=0x344) returned 1 [0158.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", lpFilePart=0x0) returned 0x4a [0158.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.462] GetFileType (hFile=0x344) returned 0x1 [0158.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.462] GetFileType (hFile=0x344) returned 0x1 [0158.463] WriteFile (in: hFile=0x344, lpBuffer=0x2829a90*, nNumberOfBytesToWrite=0x3290, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2829a90*, lpNumberOfBytesWritten=0x12dd18*=0x3290, lpOverlapped=0x0) returned 1 [0158.464] CloseHandle (hObject=0x344) returned 1 [0158.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi", lpFilePart=0x0) returned 0x4a [0158.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi.SYMMYWARE", lpFilePart=0x0) returned 0x54 [0158.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1eff280, ftCreationTime.dwHighDateTime=0x1d5da7e, ftLastAccessTime.dwLowDateTime=0xe73a5b30, ftLastAccessTime.dwHighDateTime=0x1d5dd93, ftLastWriteTime.dwLowDateTime=0xc373fb0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3290)) returned 1 [0158.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\8HgSFlH55NRP6tcos3.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\8hgsflh55nrp6tcos3.avi.symmyware")) returned 1 [0158.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", lpFilePart=0x0) returned 0x43 [0158.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.466] GetFileType (hFile=0x344) returned 0x1 [0158.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.466] GetFileType (hFile=0x344) returned 0x1 [0158.466] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xe7f1 [0158.466] ReadFile (in: hFile=0x344, lpBuffer=0x282f918, nNumberOfBytesToRead=0xe7f1, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x282f918*, lpNumberOfBytesRead=0x12dcb8*=0xe7f1, lpOverlapped=0x0) returned 1 [0158.467] CloseHandle (hObject=0x344) returned 1 [0158.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", lpFilePart=0x0) returned 0x43 [0158.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.490] GetFileType (hFile=0x344) returned 0x1 [0158.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.490] GetFileType (hFile=0x344) returned 0x1 [0158.490] WriteFile (in: hFile=0x344, lpBuffer=0x28b9e30*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x28b9e30*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.491] CloseHandle (hObject=0x344) returned 1 [0158.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", lpFilePart=0x0) returned 0x43 [0158.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.494] GetFileType (hFile=0x344) returned 0x1 [0158.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.494] GetFileType (hFile=0x344) returned 0x1 [0158.494] WriteFile (in: hFile=0x344, lpBuffer=0x28a9fb8*, nNumberOfBytesToWrite=0xe800, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x28a9fb8*, lpNumberOfBytesWritten=0x12dd18*=0xe800, lpOverlapped=0x0) returned 1 [0158.496] CloseHandle (hObject=0x344) returned 1 [0158.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv", lpFilePart=0x0) returned 0x43 [0158.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv.SYMMYWARE", lpFilePart=0x0) returned 0x4d [0158.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89daf3d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0x7a25ba70, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0xc3c21b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe800)) returned 1 [0158.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.497] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\FItRK2gWYnf.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\fitrk2gwynf.flv.symmyware")) returned 1 [0158.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", lpFilePart=0x0) returned 0x4c [0158.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.498] GetFileType (hFile=0x344) returned 0x1 [0158.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.498] GetFileType (hFile=0x344) returned 0x1 [0158.498] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xe340 [0158.498] ReadFile (in: hFile=0x344, lpBuffer=0x28bb370, nNumberOfBytesToRead=0xe340, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x28bb370*, lpNumberOfBytesRead=0x12dcb8*=0xe340, lpOverlapped=0x0) returned 1 [0158.500] CloseHandle (hObject=0x344) returned 1 [0158.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", lpFilePart=0x0) returned 0x4c [0158.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.628] GetFileType (hFile=0x344) returned 0x1 [0158.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.628] GetFileType (hFile=0x344) returned 0x1 [0158.628] WriteFile (in: hFile=0x344, lpBuffer=0x2748248*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x2748248*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.629] CloseHandle (hObject=0x344) returned 1 [0158.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", lpFilePart=0x0) returned 0x4c [0158.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.632] GetFileType (hFile=0x344) returned 0x1 [0158.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.633] GetFileType (hFile=0x344) returned 0x1 [0158.633] WriteFile (in: hFile=0x344, lpBuffer=0x2738850*, nNumberOfBytesToWrite=0xe350, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2738850*, lpNumberOfBytesWritten=0x12dd18*=0xe350, lpOverlapped=0x0) returned 1 [0158.635] CloseHandle (hObject=0x344) returned 1 [0158.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv", lpFilePart=0x0) returned 0x4c [0158.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0158.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9704d60, ftCreationTime.dwHighDateTime=0x1d5e53b, ftLastAccessTime.dwLowDateTime=0x93e9e140, ftLastAccessTime.dwHighDateTime=0x1d5e31e, ftLastWriteTime.dwLowDateTime=0xc4f3480, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xe350)) returned 1 [0158.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.635] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\LJNpPargRyXkFwYrzPwD.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\ljnppargryxkfwyrzpwd.flv.symmyware")) returned 1 [0158.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", lpFilePart=0x0) returned 0x4c [0158.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.637] GetFileType (hFile=0x344) returned 0x1 [0158.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.637] GetFileType (hFile=0x344) returned 0x1 [0158.637] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1059 [0158.637] ReadFile (in: hFile=0x344, lpBuffer=0x27497f0, nNumberOfBytesToRead=0x1059, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27497f0*, lpNumberOfBytesRead=0x12dcb8*=0x1059, lpOverlapped=0x0) returned 1 [0158.638] CloseHandle (hObject=0x344) returned 1 [0158.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", lpFilePart=0x0) returned 0x4c [0158.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.647] GetFileType (hFile=0x344) returned 0x1 [0158.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.648] GetFileType (hFile=0x344) returned 0x1 [0158.648] WriteFile (in: hFile=0x344, lpBuffer=0x27a0158*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x27a0158*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.649] CloseHandle (hObject=0x344) returned 1 [0158.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", lpFilePart=0x0) returned 0x4c [0158.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.650] GetFileType (hFile=0x344) returned 0x1 [0158.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.650] GetFileType (hFile=0x344) returned 0x1 [0158.650] WriteFile (in: hFile=0x344, lpBuffer=0x279da50*, nNumberOfBytesToWrite=0x1060, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x279da50*, lpNumberOfBytesWritten=0x12dd18*=0x1060, lpOverlapped=0x0) returned 1 [0158.651] CloseHandle (hObject=0x344) returned 1 [0158.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi", lpFilePart=0x0) returned 0x4c [0158.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0158.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36cbae70, ftCreationTime.dwHighDateTime=0x1d5d802, ftLastAccessTime.dwLowDateTime=0xcf479ad0, ftLastAccessTime.dwHighDateTime=0x1d5da21, ftLastWriteTime.dwLowDateTime=0xc51cc90, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1060)) returned 1 [0158.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.652] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\mIc2iJcfFCz1qitpC1UC.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\mic2ijcffcz1qitpc1uc.avi.symmyware")) returned 1 [0158.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", lpFilePart=0x0) returned 0x4c [0158.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.664] GetFileType (hFile=0x344) returned 0x1 [0158.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.664] GetFileType (hFile=0x344) returned 0x1 [0158.665] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x9c5b [0158.665] ReadFile (in: hFile=0x344, lpBuffer=0x27a1700, nNumberOfBytesToRead=0x9c5b, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x27a1700*, lpNumberOfBytesRead=0x12dcb8*=0x9c5b, lpOverlapped=0x0) returned 1 [0158.666] CloseHandle (hObject=0x344) returned 1 [0158.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", lpFilePart=0x0) returned 0x4c [0158.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0158.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.677] GetFileType (hFile=0x344) returned 0x1 [0158.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0158.677] GetFileType (hFile=0x344) returned 0x1 [0158.677] WriteFile (in: hFile=0x344, lpBuffer=0x282c680*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12db78, lpOverlapped=0x0 | out: lpBuffer=0x282c680*, lpNumberOfBytesWritten=0x12db78*=0x36, lpOverlapped=0x0) returned 1 [0158.678] CloseHandle (hObject=0x344) returned 1 [0158.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", lpFilePart=0x0) returned 0x4c [0158.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0158.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.679] GetFileType (hFile=0x344) returned 0x1 [0158.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0158.679] GetFileType (hFile=0x344) returned 0x1 [0158.679] WriteFile (in: hFile=0x344, lpBuffer=0x2821378*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x2821378*, lpNumberOfBytesWritten=0x12dd18*=0x9c60, lpOverlapped=0x0) returned 1 [0158.680] CloseHandle (hObject=0x344) returned 1 [0158.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv", lpFilePart=0x0) returned 0x4c [0158.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv.SYMMYWARE", lpFilePart=0x0) returned 0x56 [0158.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab6cc70, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x640180b0, ftLastAccessTime.dwHighDateTime=0x1d5deb3, ftLastWriteTime.dwLowDateTime=0xc561250, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x9c60)) returned 1 [0158.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0158.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\W_Ba5xynTB5KO49X4LVi.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\w_ba5xyntb5ko49x4lvi.flv.symmyware")) returned 1 [0158.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x", lpFilePart=0x0) returned 0x47 [0158.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\", lpFilePart=0x0) returned 0x48 [0158.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.682] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a7c9d60, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x973afc50, ftLastAccessTime.dwHighDateTime=0x1d5e574, ftLastWriteTime.dwLowDateTime=0x973afc50, ftLastWriteTime.dwHighDateTime=0x1d5e574, nFileSizeHigh=0x0, nFileSizeLow=0x160a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="0k4GDhPCCTArb E.mkv", cAlternateFileName="0K4GDH~1.MKV")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda19ba80, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0x8e391da0, ftLastAccessTime.dwHighDateTime=0x1d5dfff, ftLastWriteTime.dwLowDateTime=0x8e391da0, ftLastWriteTime.dwHighDateTime=0x1d5dfff, nFileSizeHigh=0x0, nFileSizeLow=0xd12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BfXOlIpbFr0.swf", cAlternateFileName="BFXOLI~1.SWF")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x162b1990, ftCreationTime.dwHighDateTime=0x1d5dc52, ftLastAccessTime.dwLowDateTime=0x9f1eb1a0, ftLastAccessTime.dwHighDateTime=0x1d5da52, ftLastWriteTime.dwLowDateTime=0x9f1eb1a0, ftLastWriteTime.dwHighDateTime=0x1d5da52, nFileSizeHigh=0x0, nFileSizeLow=0xb2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmWb8sRO.swf", cAlternateFileName="")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130808c0, ftCreationTime.dwHighDateTime=0x1d5e483, ftLastAccessTime.dwLowDateTime=0xf04e10e0, ftLastAccessTime.dwHighDateTime=0x1d5d857, ftLastWriteTime.dwLowDateTime=0xf04e10e0, ftLastWriteTime.dwHighDateTime=0x1d5d857, nFileSizeHigh=0x0, nFileSizeLow=0x382e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lOh8.flv", cAlternateFileName="")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NZHVW2A", cAlternateFileName="")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fca3ac0, ftCreationTime.dwHighDateTime=0x1d5ddd7, ftLastAccessTime.dwLowDateTime=0xa8402770, ftLastAccessTime.dwHighDateTime=0x1d5e252, ftLastWriteTime.dwLowDateTime=0xa8402770, ftLastWriteTime.dwHighDateTime=0x1d5e252, nFileSizeHigh=0x0, nFileSizeLow=0x1888c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WfuKNpHh0e4Uks-Jsv.mp4", cAlternateFileName="WFUKNP~1.MP4")) returned 1 [0158.683] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebf6a30, ftCreationTime.dwHighDateTime=0x1d5de62, ftLastAccessTime.dwLowDateTime=0xb4c54190, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xb4c54190, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x18018, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yj2Vtp3FV.mp4", cAlternateFileName="YJ2VTP~1.MP4")) returned 1 [0158.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.684] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0158.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0158.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0158.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x", lpFilePart=0x0) returned 0x47 [0158.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\", lpFilePart=0x0) returned 0x48 [0158.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0158.684] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc96eb4a0, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xd0940640, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0xd0940640, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a7c9d60, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0x973afc50, ftLastAccessTime.dwHighDateTime=0x1d5e574, ftLastWriteTime.dwLowDateTime=0x973afc50, ftLastWriteTime.dwHighDateTime=0x1d5e574, nFileSizeHigh=0x0, nFileSizeLow=0x160a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="0k4GDhPCCTArb E.mkv", cAlternateFileName="0K4GDH~1.MKV")) returned 1 [0158.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda19ba80, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0x8e391da0, ftLastAccessTime.dwHighDateTime=0x1d5dfff, ftLastWriteTime.dwLowDateTime=0x8e391da0, ftLastWriteTime.dwHighDateTime=0x1d5dfff, nFileSizeHigh=0x0, nFileSizeLow=0xd12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BfXOlIpbFr0.swf", cAlternateFileName="BFXOLI~1.SWF")) returned 1 [0158.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x162b1990, ftCreationTime.dwHighDateTime=0x1d5dc52, ftLastAccessTime.dwLowDateTime=0x9f1eb1a0, ftLastAccessTime.dwHighDateTime=0x1d5da52, ftLastWriteTime.dwLowDateTime=0x9f1eb1a0, ftLastWriteTime.dwHighDateTime=0x1d5da52, nFileSizeHigh=0x0, nFileSizeLow=0xb2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmWb8sRO.swf", cAlternateFileName="")) returned 1 [0158.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130808c0, ftCreationTime.dwHighDateTime=0x1d5e483, ftLastAccessTime.dwLowDateTime=0xf04e10e0, ftLastAccessTime.dwHighDateTime=0x1d5d857, ftLastWriteTime.dwLowDateTime=0xf04e10e0, ftLastWriteTime.dwHighDateTime=0x1d5d857, nFileSizeHigh=0x0, nFileSizeLow=0x382e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lOh8.flv", cAlternateFileName="")) returned 1 [0158.685] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NZHVW2A", cAlternateFileName="")) returned 1 [0158.686] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fca3ac0, ftCreationTime.dwHighDateTime=0x1d5ddd7, ftLastAccessTime.dwLowDateTime=0xa8402770, ftLastAccessTime.dwHighDateTime=0x1d5e252, ftLastWriteTime.dwLowDateTime=0xa8402770, ftLastWriteTime.dwHighDateTime=0x1d5e252, nFileSizeHigh=0x0, nFileSizeLow=0x1888c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WfuKNpHh0e4Uks-Jsv.mp4", cAlternateFileName="WFUKNP~1.MP4")) returned 1 [0158.686] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebf6a30, ftCreationTime.dwHighDateTime=0x1d5de62, ftLastAccessTime.dwLowDateTime=0xb4c54190, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xb4c54190, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x18018, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yj2Vtp3FV.mp4", cAlternateFileName="YJ2VTP~1.MP4")) returned 1 [0158.686] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebf6a30, ftCreationTime.dwHighDateTime=0x1d5de62, ftLastAccessTime.dwLowDateTime=0xb4c54190, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xb4c54190, ftLastWriteTime.dwHighDateTime=0x1d5e105, nFileSizeHigh=0x0, nFileSizeLow=0x18018, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yj2Vtp3FV.mp4", cAlternateFileName="YJ2VTP~1.MP4")) returned 0 [0158.686] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0158.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0158.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0158.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", lpFilePart=0x0) returned 0x50 [0158.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0158.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.687] GetFileType (hFile=0x344) returned 0x1 [0158.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0158.687] GetFileType (hFile=0x344) returned 0x1 [0158.687] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x382e [0158.687] ReadFile (in: hFile=0x344, lpBuffer=0x2831e50, nNumberOfBytesToRead=0x382e, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x2831e50*, lpNumberOfBytesRead=0x12dc38*=0x382e, lpOverlapped=0x0) returned 1 [0158.688] CloseHandle (hObject=0x344) returned 1 [0158.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", lpFilePart=0x0) returned 0x50 [0158.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0158.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.898] GetFileType (hFile=0x344) returned 0x1 [0158.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0158.898] GetFileType (hFile=0x344) returned 0x1 [0158.898] WriteFile (in: hFile=0x344, lpBuffer=0x2897498*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2897498*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0158.899] CloseHandle (hObject=0x344) returned 1 [0158.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", lpFilePart=0x0) returned 0x50 [0158.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0158.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.900] GetFileType (hFile=0x344) returned 0x1 [0158.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0158.900] GetFileType (hFile=0x344) returned 0x1 [0158.900] WriteFile (in: hFile=0x344, lpBuffer=0x28925d8*, nNumberOfBytesToWrite=0x3830, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x28925d8*, lpNumberOfBytesWritten=0x12dc98*=0x3830, lpOverlapped=0x0) returned 1 [0158.902] CloseHandle (hObject=0x344) returned 1 [0158.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv", lpFilePart=0x0) returned 0x50 [0158.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv.SYMMYWARE", lpFilePart=0x0) returned 0x5a [0158.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130808c0, ftCreationTime.dwHighDateTime=0x1d5e483, ftLastAccessTime.dwLowDateTime=0xf04e10e0, ftLastAccessTime.dwHighDateTime=0x1d5d857, ftLastWriteTime.dwLowDateTime=0xc764480, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x3830)) returned 1 [0158.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0158.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\lOh8.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\loh8.flv.symmyware")) returned 1 [0158.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", lpFilePart=0x0) returned 0x5e [0158.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0158.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.904] GetFileType (hFile=0x344) returned 0x1 [0158.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0158.904] GetFileType (hFile=0x344) returned 0x1 [0158.904] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x1888c [0158.905] ReadFile (in: hFile=0x344, lpBuffer=0x12985d18, nNumberOfBytesToRead=0x1888c, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x12985d18*, lpNumberOfBytesRead=0x12dc38*=0x1888c, lpOverlapped=0x0) returned 1 [0158.907] CloseHandle (hObject=0x344) returned 1 [0158.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", lpFilePart=0x0) returned 0x5e [0158.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0158.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0158.945] GetFileType (hFile=0x344) returned 0x1 [0158.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0158.945] GetFileType (hFile=0x344) returned 0x1 [0158.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", lpFilePart=0x0) returned 0x5e [0158.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0158.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.948] GetFileType (hFile=0x344) returned 0x1 [0158.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0158.948] GetFileType (hFile=0x344) returned 0x1 [0158.948] WriteFile (in: hFile=0x344, lpBuffer=0x1299e5e0*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x1299e5e0*, lpNumberOfBytesWritten=0x12dc98*=0x18890, lpOverlapped=0x0) returned 1 [0158.951] CloseHandle (hObject=0x344) returned 1 [0158.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4", lpFilePart=0x0) returned 0x5e [0158.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x68 [0158.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0158.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fca3ac0, ftCreationTime.dwHighDateTime=0x1d5ddd7, ftLastAccessTime.dwLowDateTime=0xa8402770, ftLastAccessTime.dwHighDateTime=0x1d5e252, ftLastWriteTime.dwLowDateTime=0xc7c37f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x18890)) returned 1 [0158.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0158.951] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\WfuKNpHh0e4Uks-Jsv.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\wfuknphh0e4uks-jsv.mp4.symmyware")) returned 1 [0158.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", lpFilePart=0x0) returned 0x55 [0158.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0158.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0158.953] GetFileType (hFile=0x344) returned 0x1 [0158.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0158.953] GetFileType (hFile=0x344) returned 0x1 [0158.953] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x18018 [0158.953] ReadFile (in: hFile=0x344, lpBuffer=0x129b6ea8, nNumberOfBytesToRead=0x18018, lpNumberOfBytesRead=0x12dc38, lpOverlapped=0x0 | out: lpBuffer=0x129b6ea8*, lpNumberOfBytesRead=0x12dc38*=0x18018, lpOverlapped=0x0) returned 1 [0158.955] CloseHandle (hObject=0x344) returned 1 [0159.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", lpFilePart=0x0) returned 0x55 [0159.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0159.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.033] GetFileType (hFile=0x344) returned 0x1 [0159.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0159.033] GetFileType (hFile=0x344) returned 0x1 [0159.034] WriteFile (in: hFile=0x344, lpBuffer=0x2717710*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12daf8, lpOverlapped=0x0 | out: lpBuffer=0x2717710*, lpNumberOfBytesWritten=0x12daf8*=0x36, lpOverlapped=0x0) returned 1 [0159.035] CloseHandle (hObject=0x344) returned 1 [0159.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", lpFilePart=0x0) returned 0x55 [0159.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0159.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.036] GetFileType (hFile=0x344) returned 0x1 [0159.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0159.036] GetFileType (hFile=0x344) returned 0x1 [0159.037] WriteFile (in: hFile=0x344, lpBuffer=0x12732288*, nNumberOfBytesToWrite=0x18020, lpNumberOfBytesWritten=0x12dc98, lpOverlapped=0x0 | out: lpBuffer=0x12732288*, lpNumberOfBytesWritten=0x12dc98*=0x18020, lpOverlapped=0x0) returned 1 [0159.040] CloseHandle (hObject=0x344) returned 1 [0159.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4", lpFilePart=0x0) returned 0x55 [0159.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x5f [0159.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0159.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebf6a30, ftCreationTime.dwHighDateTime=0x1d5de62, ftLastAccessTime.dwLowDateTime=0xb4c54190, ftLastAccessTime.dwHighDateTime=0x1d5e105, ftLastWriteTime.dwLowDateTime=0xc893040, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x18020)) returned 1 [0159.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0159.051] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\Yj2Vtp3FV.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\yj2vtp3fv.mp4.symmyware")) returned 1 [0159.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0159.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A", lpFilePart=0x0) returned 0x4f [0159.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\", lpFilePart=0x0) returned 0x50 [0159.053] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.053] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4p1O", cAlternateFileName="")) returned 1 [0159.054] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd24bf0, ftCreationTime.dwHighDateTime=0x1d5e44a, ftLastAccessTime.dwLowDateTime=0x87278820, ftLastAccessTime.dwHighDateTime=0x1d5e44c, ftLastWriteTime.dwLowDateTime=0x87278820, ftLastWriteTime.dwHighDateTime=0x1d5e44c, nFileSizeHigh=0x0, nFileSizeLow=0x863c, dwReserved0=0x0, dwReserved1=0x0, cFileName="53Wy54nTew_1.mp4", cAlternateFileName="53WY54~1.MP4")) returned 1 [0159.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a935450, ftCreationTime.dwHighDateTime=0x1d5d7cd, ftLastAccessTime.dwLowDateTime=0x9cd97f20, ftLastAccessTime.dwHighDateTime=0x1d5daab, ftLastWriteTime.dwLowDateTime=0x9cd97f20, ftLastWriteTime.dwHighDateTime=0x1d5daab, nFileSizeHigh=0x0, nFileSizeLow=0x180e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5fVQcxA7M13eACqj9aEJ.swf", cAlternateFileName="5FVQCX~1.SWF")) returned 1 [0159.055] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9m0FJjKiW79VNv8Y", cAlternateFileName="9M0FJJ~1")) returned 1 [0159.056] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9m0FJjKiW79VNv8Y", cAlternateFileName="9M0FJJ~1")) returned 0 [0159.056] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0159.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0159.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0159.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A", lpFilePart=0x0) returned 0x4f [0159.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\", lpFilePart=0x0) returned 0x50 [0159.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.057] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9dd0600, ftCreationTime.dwHighDateTime=0x1d5d962, ftLastAccessTime.dwLowDateTime=0x237eec80, ftLastAccessTime.dwHighDateTime=0x1d5e3a4, ftLastWriteTime.dwLowDateTime=0x237eec80, ftLastWriteTime.dwHighDateTime=0x1d5e3a4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4p1O", cAlternateFileName="")) returned 1 [0159.058] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd24bf0, ftCreationTime.dwHighDateTime=0x1d5e44a, ftLastAccessTime.dwLowDateTime=0x87278820, ftLastAccessTime.dwHighDateTime=0x1d5e44c, ftLastWriteTime.dwLowDateTime=0x87278820, ftLastWriteTime.dwHighDateTime=0x1d5e44c, nFileSizeHigh=0x0, nFileSizeLow=0x863c, dwReserved0=0x0, dwReserved1=0x0, cFileName="53Wy54nTew_1.mp4", cAlternateFileName="53WY54~1.MP4")) returned 1 [0159.059] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a935450, ftCreationTime.dwHighDateTime=0x1d5d7cd, ftLastAccessTime.dwLowDateTime=0x9cd97f20, ftLastAccessTime.dwHighDateTime=0x1d5daab, ftLastWriteTime.dwLowDateTime=0x9cd97f20, ftLastWriteTime.dwHighDateTime=0x1d5daab, nFileSizeHigh=0x0, nFileSizeLow=0x180e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5fVQcxA7M13eACqj9aEJ.swf", cAlternateFileName="5FVQCX~1.SWF")) returned 1 [0159.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9m0FJjKiW79VNv8Y", cAlternateFileName="9M0FJJ~1")) returned 1 [0159.060] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.060] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0159.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0159.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", lpFilePart=0x0) returned 0x60 [0159.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0159.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.061] GetFileType (hFile=0x344) returned 0x1 [0159.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0159.061] GetFileType (hFile=0x344) returned 0x1 [0159.062] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x863c [0159.062] ReadFile (in: hFile=0x344, lpBuffer=0x271c448, nNumberOfBytesToRead=0x863c, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x271c448*, lpNumberOfBytesRead=0x12dbb8*=0x863c, lpOverlapped=0x0) returned 1 [0159.063] CloseHandle (hObject=0x344) returned 1 [0159.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", lpFilePart=0x0) returned 0x60 [0159.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0159.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.134] GetFileType (hFile=0x344) returned 0x1 [0159.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0159.134] GetFileType (hFile=0x344) returned 0x1 [0159.134] WriteFile (in: hFile=0x344, lpBuffer=0x279ef20*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x279ef20*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0159.136] CloseHandle (hObject=0x344) returned 1 [0159.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", lpFilePart=0x0) returned 0x60 [0159.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0159.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.155] GetFileType (hFile=0x344) returned 0x1 [0159.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0159.155] GetFileType (hFile=0x344) returned 0x1 [0159.156] WriteFile (in: hFile=0x344, lpBuffer=0x2795220*, nNumberOfBytesToWrite=0x8640, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x2795220*, lpNumberOfBytesWritten=0x12dc18*=0x8640, lpOverlapped=0x0) returned 1 [0159.157] CloseHandle (hObject=0x344) returned 1 [0159.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4", lpFilePart=0x0) returned 0x60 [0159.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x6a [0159.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0159.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd24bf0, ftCreationTime.dwHighDateTime=0x1d5e44a, ftLastAccessTime.dwLowDateTime=0x87278820, ftLastAccessTime.dwHighDateTime=0x1d5e44c, ftLastWriteTime.dwLowDateTime=0xc973a00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0159.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0159.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\53Wy54nTew_1.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\53wy54ntew_1.mp4.symmyware")) returned 1 [0159.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0159.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O", lpFilePart=0x0) returned 0x54 [0159.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\", lpFilePart=0x0) returned 0x55 [0159.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf251c0, ftCreationTime.dwHighDateTime=0x1d5e482, ftLastAccessTime.dwLowDateTime=0xe797aeb0, ftLastAccessTime.dwHighDateTime=0x1d5db28, ftLastWriteTime.dwLowDateTime=0xe797aeb0, ftLastWriteTime.dwHighDateTime=0x1d5db28, nFileSizeHigh=0x0, nFileSizeLow=0xa86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6blj.flv", cAlternateFileName="")) returned 1 [0159.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A2XyvDWjK", cAlternateFileName="A2XYVD~1")) returned 1 [0159.160] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde1be10, ftCreationTime.dwHighDateTime=0x1d5d879, ftLastAccessTime.dwLowDateTime=0x4af1e130, ftLastAccessTime.dwHighDateTime=0x1d5e55e, ftLastWriteTime.dwLowDateTime=0x4af1e130, ftLastWriteTime.dwHighDateTime=0x1d5e55e, nFileSizeHigh=0x0, nFileSizeLow=0x696b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GjOI35ihB.mkv", cAlternateFileName="GJOI35~1.MKV")) returned 1 [0159.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29dc8af0, ftCreationTime.dwHighDateTime=0x1d5e49f, ftLastAccessTime.dwLowDateTime=0x34689720, ftLastAccessTime.dwHighDateTime=0x1d5df13, ftLastWriteTime.dwLowDateTime=0x34689720, ftLastWriteTime.dwHighDateTime=0x1d5df13, nFileSizeHigh=0x0, nFileSizeLow=0x73d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="o15vmKhliXcXsYIoAx.flv", cAlternateFileName="O15VMK~1.FLV")) returned 1 [0159.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97f410, ftCreationTime.dwHighDateTime=0x1d5de06, ftLastAccessTime.dwLowDateTime=0x85d88580, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x85d88580, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0xb925, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkDJgp0VIM.mkv", cAlternateFileName="SKDJGP~1.MKV")) returned 1 [0159.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.161] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0159.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0159.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0159.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O", lpFilePart=0x0) returned 0x54 [0159.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\", lpFilePart=0x0) returned 0x55 [0159.162] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd22a7d30, ftCreationTime.dwHighDateTime=0x1d5df08, ftLastAccessTime.dwLowDateTime=0x1369bc30, ftLastAccessTime.dwHighDateTime=0x1d5deae, ftLastWriteTime.dwLowDateTime=0x1369bc30, ftLastWriteTime.dwHighDateTime=0x1d5deae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf251c0, ftCreationTime.dwHighDateTime=0x1d5e482, ftLastAccessTime.dwLowDateTime=0xe797aeb0, ftLastAccessTime.dwHighDateTime=0x1d5db28, ftLastWriteTime.dwLowDateTime=0xe797aeb0, ftLastWriteTime.dwHighDateTime=0x1d5db28, nFileSizeHigh=0x0, nFileSizeLow=0xa86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6blj.flv", cAlternateFileName="")) returned 1 [0159.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A2XyvDWjK", cAlternateFileName="A2XYVD~1")) returned 1 [0159.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde1be10, ftCreationTime.dwHighDateTime=0x1d5d879, ftLastAccessTime.dwLowDateTime=0x4af1e130, ftLastAccessTime.dwHighDateTime=0x1d5e55e, ftLastWriteTime.dwLowDateTime=0x4af1e130, ftLastWriteTime.dwHighDateTime=0x1d5e55e, nFileSizeHigh=0x0, nFileSizeLow=0x696b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GjOI35ihB.mkv", cAlternateFileName="GJOI35~1.MKV")) returned 1 [0159.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29dc8af0, ftCreationTime.dwHighDateTime=0x1d5e49f, ftLastAccessTime.dwLowDateTime=0x34689720, ftLastAccessTime.dwHighDateTime=0x1d5df13, ftLastWriteTime.dwLowDateTime=0x34689720, ftLastWriteTime.dwHighDateTime=0x1d5df13, nFileSizeHigh=0x0, nFileSizeLow=0x73d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="o15vmKhliXcXsYIoAx.flv", cAlternateFileName="O15VMK~1.FLV")) returned 1 [0159.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97f410, ftCreationTime.dwHighDateTime=0x1d5de06, ftLastAccessTime.dwLowDateTime=0x85d88580, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x85d88580, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0xb925, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkDJgp0VIM.mkv", cAlternateFileName="SKDJGP~1.MKV")) returned 1 [0159.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97f410, ftCreationTime.dwHighDateTime=0x1d5de06, ftLastAccessTime.dwLowDateTime=0x85d88580, ftLastAccessTime.dwHighDateTime=0x1d5e813, ftLastWriteTime.dwLowDateTime=0x85d88580, ftLastWriteTime.dwHighDateTime=0x1d5e813, nFileSizeHigh=0x0, nFileSizeLow=0xb925, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkDJgp0VIM.mkv", cAlternateFileName="SKDJGP~1.MKV")) returned 0 [0159.164] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0159.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0159.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", lpFilePart=0x0) returned 0x5d [0159.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.164] GetFileType (hFile=0x344) returned 0x1 [0159.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0159.165] GetFileType (hFile=0x344) returned 0x1 [0159.165] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0xa86c [0159.165] ReadFile (in: hFile=0x344, lpBuffer=0x27a42b8, nNumberOfBytesToRead=0xa86c, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x27a42b8*, lpNumberOfBytesRead=0x12db38*=0xa86c, lpOverlapped=0x0) returned 1 [0159.166] CloseHandle (hObject=0x344) returned 1 [0159.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", lpFilePart=0x0) returned 0x5d [0159.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0159.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.180] GetFileType (hFile=0x344) returned 0x1 [0159.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0159.180] GetFileType (hFile=0x344) returned 0x1 [0159.180] WriteFile (in: hFile=0x344, lpBuffer=0x281e9c0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x281e9c0*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0159.182] CloseHandle (hObject=0x344) returned 1 [0159.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", lpFilePart=0x0) returned 0x5d [0159.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.183] GetFileType (hFile=0x344) returned 0x1 [0159.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0159.183] GetFileType (hFile=0x344) returned 0x1 [0159.183] WriteFile (in: hFile=0x344, lpBuffer=0x2812aa8*, nNumberOfBytesToWrite=0xa870, lpNumberOfBytesWritten=0x12db98, lpOverlapped=0x0 | out: lpBuffer=0x2812aa8*, lpNumberOfBytesWritten=0x12db98*=0xa870, lpOverlapped=0x0) returned 1 [0159.185] CloseHandle (hObject=0x344) returned 1 [0159.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv", lpFilePart=0x0) returned 0x5d [0159.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv.SYMMYWARE", lpFilePart=0x0) returned 0x67 [0159.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0159.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf251c0, ftCreationTime.dwHighDateTime=0x1d5e482, ftLastAccessTime.dwLowDateTime=0xe797aeb0, ftLastAccessTime.dwHighDateTime=0x1d5db28, ftLastWriteTime.dwLowDateTime=0xc973a00, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa870)) returned 1 [0159.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0159.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\6blj.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\6blj.flv.symmyware")) returned 1 [0159.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", lpFilePart=0x0) returned 0x6b [0159.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.188] GetFileType (hFile=0x344) returned 0x1 [0159.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0159.188] GetFileType (hFile=0x344) returned 0x1 [0159.188] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x73d3 [0159.188] ReadFile (in: hFile=0x344, lpBuffer=0x2820020, nNumberOfBytesToRead=0x73d3, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x2820020*, lpNumberOfBytesRead=0x12db38*=0x73d3, lpOverlapped=0x0) returned 1 [0159.190] CloseHandle (hObject=0x344) returned 1 [0159.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", lpFilePart=0x0) returned 0x6b [0159.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0159.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.221] GetFileType (hFile=0x344) returned 0x1 [0159.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0159.221] GetFileType (hFile=0x344) returned 0x1 [0159.221] WriteFile (in: hFile=0x344, lpBuffer=0x289bcd0*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x289bcd0*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0159.223] CloseHandle (hObject=0x344) returned 1 [0159.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", lpFilePart=0x0) returned 0x6b [0159.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.224] GetFileType (hFile=0x344) returned 0x1 [0159.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0159.224] GetFileType (hFile=0x344) returned 0x1 [0159.224] WriteFile (in: hFile=0x344, lpBuffer=0x2893218*, nNumberOfBytesToWrite=0x73e0, lpNumberOfBytesWritten=0x12db98, lpOverlapped=0x0 | out: lpBuffer=0x2893218*, lpNumberOfBytesWritten=0x12db98*=0x73e0, lpOverlapped=0x0) returned 1 [0159.226] CloseHandle (hObject=0x344) returned 1 [0159.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv", lpFilePart=0x0) returned 0x6b [0159.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv.SYMMYWARE", lpFilePart=0x0) returned 0x75 [0159.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0159.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29dc8af0, ftCreationTime.dwHighDateTime=0x1d5e49f, ftLastAccessTime.dwLowDateTime=0x34689720, ftLastAccessTime.dwHighDateTime=0x1d5df13, ftLastWriteTime.dwLowDateTime=0xc98e7b0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x73e0)) returned 1 [0159.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0159.227] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\o15vmKhliXcXsYIoAx.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\o15vmkhlixcxsyioax.flv.symmyware")) returned 1 [0159.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0159.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK", lpFilePart=0x0) returned 0x5e [0159.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\", lpFilePart=0x0) returned 0x5f [0159.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388fbd20, ftCreationTime.dwHighDateTime=0x1d5e138, ftLastAccessTime.dwLowDateTime=0x80038e50, ftLastAccessTime.dwHighDateTime=0x1d5dd70, ftLastWriteTime.dwLowDateTime=0x80038e50, ftLastWriteTime.dwHighDateTime=0x1d5dd70, nFileSizeHigh=0x0, nFileSizeLow=0x7b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="agBC8rCwUR.swf", cAlternateFileName="AGBC8R~1.SWF")) returned 1 [0159.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-4aH", cAlternateFileName="")) returned 1 [0159.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfb66e0, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0x633c93b0, ftLastAccessTime.dwHighDateTime=0x1d5e6ae, ftLastWriteTime.dwLowDateTime=0x633c93b0, ftLastWriteTime.dwHighDateTime=0x1d5e6ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a73, dwReserved0=0x0, dwReserved1=0x0, cFileName="UJleKwaIe7.mp4", cAlternateFileName="UJLEKW~1.MP4")) returned 1 [0159.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.234] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0159.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0159.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0159.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK", lpFilePart=0x0) returned 0x5e [0159.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\", lpFilePart=0x0) returned 0x5f [0159.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40842b00, ftCreationTime.dwHighDateTime=0x1d5e6cf, ftLastAccessTime.dwLowDateTime=0x824aa370, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0x824aa370, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388fbd20, ftCreationTime.dwHighDateTime=0x1d5e138, ftLastAccessTime.dwLowDateTime=0x80038e50, ftLastAccessTime.dwHighDateTime=0x1d5dd70, ftLastWriteTime.dwLowDateTime=0x80038e50, ftLastWriteTime.dwHighDateTime=0x1d5dd70, nFileSizeHigh=0x0, nFileSizeLow=0x7b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="agBC8rCwUR.swf", cAlternateFileName="AGBC8R~1.SWF")) returned 1 [0159.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-4aH", cAlternateFileName="")) returned 1 [0159.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfb66e0, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0x633c93b0, ftLastAccessTime.dwHighDateTime=0x1d5e6ae, ftLastWriteTime.dwLowDateTime=0x633c93b0, ftLastWriteTime.dwHighDateTime=0x1d5e6ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a73, dwReserved0=0x0, dwReserved1=0x0, cFileName="UJleKwaIe7.mp4", cAlternateFileName="UJLEKW~1.MP4")) returned 1 [0159.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfb66e0, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0x633c93b0, ftLastAccessTime.dwHighDateTime=0x1d5e6ae, ftLastWriteTime.dwLowDateTime=0x633c93b0, ftLastWriteTime.dwHighDateTime=0x1d5e6ae, nFileSizeHigh=0x0, nFileSizeLow=0x13a73, dwReserved0=0x0, dwReserved1=0x0, cFileName="UJleKwaIe7.mp4", cAlternateFileName="UJLEKW~1.MP4")) returned 0 [0159.238] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0159.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0159.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", lpFilePart=0x0) returned 0x6d [0159.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0159.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.239] GetFileType (hFile=0x344) returned 0x1 [0159.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0159.239] GetFileType (hFile=0x344) returned 0x1 [0159.239] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db88 | out: lpFileSizeHigh=0x12db88*=0x0) returned 0x13a73 [0159.239] ReadFile (in: hFile=0x344, lpBuffer=0x28a0a00, nNumberOfBytesToRead=0x13a73, lpNumberOfBytesRead=0x12dab8, lpOverlapped=0x0 | out: lpBuffer=0x28a0a00*, lpNumberOfBytesRead=0x12dab8*=0x13a73, lpOverlapped=0x0) returned 1 [0159.241] CloseHandle (hObject=0x344) returned 1 [0159.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", nBufferLength=0x105, lpBuffer=0x12d450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", lpFilePart=0x0) returned 0x6d [0159.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d930) returned 1 [0159.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.359] GetFileType (hFile=0x344) returned 0x1 [0159.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8a0) returned 1 [0159.359] GetFileType (hFile=0x344) returned 0x1 [0159.359] WriteFile (in: hFile=0x344, lpBuffer=0x27546f8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d978, lpOverlapped=0x0 | out: lpBuffer=0x27546f8*, lpNumberOfBytesWritten=0x12d978*=0x36, lpOverlapped=0x0) returned 1 [0159.360] CloseHandle (hObject=0x344) returned 1 [0159.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", nBufferLength=0x105, lpBuffer=0x12d510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", lpFilePart=0x0) returned 0x6d [0159.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0159.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.361] GetFileType (hFile=0x344) returned 0x1 [0159.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d960) returned 1 [0159.362] GetFileType (hFile=0x344) returned 0x1 [0159.362] WriteFile (in: hFile=0x344, lpBuffer=0x273f5a8*, nNumberOfBytesToWrite=0x13a80, lpNumberOfBytesWritten=0x12db18, lpOverlapped=0x0 | out: lpBuffer=0x273f5a8*, lpNumberOfBytesWritten=0x12db18*=0x13a80, lpOverlapped=0x0) returned 1 [0159.365] CloseHandle (hObject=0x344) returned 1 [0159.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4", lpFilePart=0x0) returned 0x6d [0159.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x77 [0159.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0159.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12dbd0 | out: lpFileInformation=0x12dbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cfb66e0, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0x633c93b0, ftLastAccessTime.dwHighDateTime=0x1d5e6ae, ftLastWriteTime.dwLowDateTime=0xca6f170, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x13a80)) returned 1 [0159.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0159.365] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\UJleKwaIe7.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\ujlekwaie7.mp4.symmyware")) returned 1 [0159.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0159.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH", lpFilePart=0x0) returned 0x64 [0159.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\", lpFilePart=0x0) returned 0x65 [0159.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e081a0, ftCreationTime.dwHighDateTime=0x1d5df68, ftLastAccessTime.dwLowDateTime=0x68f4f3d0, ftLastAccessTime.dwHighDateTime=0x1d5e2fb, ftLastWriteTime.dwLowDateTime=0x68f4f3d0, ftLastWriteTime.dwHighDateTime=0x1d5e2fb, nFileSizeHigh=0x0, nFileSizeLow=0xc568, dwReserved0=0x0, dwReserved1=0x0, cFileName="6pJXeiUpJzOmhAJ5P.flv", cAlternateFileName="6PJXEI~1.FLV")) returned 1 [0159.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39711ca0, ftCreationTime.dwHighDateTime=0x1d5e63f, ftLastAccessTime.dwLowDateTime=0x725f1270, ftLastAccessTime.dwHighDateTime=0x1d5ddb5, ftLastWriteTime.dwLowDateTime=0x725f1270, ftLastWriteTime.dwHighDateTime=0x1d5ddb5, nFileSizeHigh=0x0, nFileSizeLow=0x15b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="7fI2hqrhX10IipkL.flv", cAlternateFileName="7FI2HQ~1.FLV")) returned 1 [0159.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0cb90, ftCreationTime.dwHighDateTime=0x1d5df2f, ftLastAccessTime.dwLowDateTime=0x6f5da00, ftLastAccessTime.dwHighDateTime=0x1d5df54, ftLastWriteTime.dwLowDateTime=0x6f5da00, ftLastWriteTime.dwHighDateTime=0x1d5df54, nFileSizeHigh=0x0, nFileSizeLow=0x36fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="7KTsVyg69.swf", cAlternateFileName="7KTSVY~1.SWF")) returned 1 [0159.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f70c0, ftCreationTime.dwHighDateTime=0x1d5db08, ftLastAccessTime.dwLowDateTime=0x17d6ef20, ftLastAccessTime.dwHighDateTime=0x1d5db31, ftLastWriteTime.dwLowDateTime=0x17d6ef20, ftLastWriteTime.dwHighDateTime=0x1d5db31, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bkKPbsgjKToDq7f5IqKJ.swf", cAlternateFileName="BKKPBS~1.SWF")) returned 1 [0159.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586eff40, ftCreationTime.dwHighDateTime=0x1d5ded4, ftLastAccessTime.dwLowDateTime=0xc2789120, ftLastAccessTime.dwHighDateTime=0x1d5db47, ftLastWriteTime.dwLowDateTime=0xc2789120, ftLastWriteTime.dwHighDateTime=0x1d5db47, nFileSizeHigh=0x0, nFileSizeLow=0x6683, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUN1CdqIEA6.mp4", cAlternateFileName="BUN1CD~1.MP4")) returned 1 [0159.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10911f50, ftCreationTime.dwHighDateTime=0x1d5d7e0, ftLastAccessTime.dwLowDateTime=0xcd430770, ftLastAccessTime.dwHighDateTime=0x1d5e254, ftLastWriteTime.dwLowDateTime=0xcd430770, ftLastWriteTime.dwHighDateTime=0x1d5e254, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="c g mHXRbSPW2UIxwV2J.mkv", cAlternateFileName="CGMHXR~1.MKV")) returned 1 [0159.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVvF81iFSwzuz3npmnNs", cAlternateFileName="IVVF81~1")) returned 1 [0159.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5667410, ftCreationTime.dwHighDateTime=0x1d5dd1b, ftLastAccessTime.dwLowDateTime=0x50899250, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0x50899250, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x755e, dwReserved0=0x0, dwReserved1=0x0, cFileName="vAzI.flv", cAlternateFileName="")) returned 1 [0159.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.369] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0159.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0159.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0159.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH", lpFilePart=0x0) returned 0x64 [0159.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\", lpFilePart=0x0) returned 0x65 [0159.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe978b530, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xcd243430, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0xcd243430, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e081a0, ftCreationTime.dwHighDateTime=0x1d5df68, ftLastAccessTime.dwLowDateTime=0x68f4f3d0, ftLastAccessTime.dwHighDateTime=0x1d5e2fb, ftLastWriteTime.dwLowDateTime=0x68f4f3d0, ftLastWriteTime.dwHighDateTime=0x1d5e2fb, nFileSizeHigh=0x0, nFileSizeLow=0xc568, dwReserved0=0x0, dwReserved1=0x0, cFileName="6pJXeiUpJzOmhAJ5P.flv", cAlternateFileName="6PJXEI~1.FLV")) returned 1 [0159.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39711ca0, ftCreationTime.dwHighDateTime=0x1d5e63f, ftLastAccessTime.dwLowDateTime=0x725f1270, ftLastAccessTime.dwHighDateTime=0x1d5ddb5, ftLastWriteTime.dwLowDateTime=0x725f1270, ftLastWriteTime.dwHighDateTime=0x1d5ddb5, nFileSizeHigh=0x0, nFileSizeLow=0x15b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="7fI2hqrhX10IipkL.flv", cAlternateFileName="7FI2HQ~1.FLV")) returned 1 [0159.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0cb90, ftCreationTime.dwHighDateTime=0x1d5df2f, ftLastAccessTime.dwLowDateTime=0x6f5da00, ftLastAccessTime.dwHighDateTime=0x1d5df54, ftLastWriteTime.dwLowDateTime=0x6f5da00, ftLastWriteTime.dwHighDateTime=0x1d5df54, nFileSizeHigh=0x0, nFileSizeLow=0x36fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="7KTsVyg69.swf", cAlternateFileName="7KTSVY~1.SWF")) returned 1 [0159.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f70c0, ftCreationTime.dwHighDateTime=0x1d5db08, ftLastAccessTime.dwLowDateTime=0x17d6ef20, ftLastAccessTime.dwHighDateTime=0x1d5db31, ftLastWriteTime.dwLowDateTime=0x17d6ef20, ftLastWriteTime.dwHighDateTime=0x1d5db31, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bkKPbsgjKToDq7f5IqKJ.swf", cAlternateFileName="BKKPBS~1.SWF")) returned 1 [0159.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586eff40, ftCreationTime.dwHighDateTime=0x1d5ded4, ftLastAccessTime.dwLowDateTime=0xc2789120, ftLastAccessTime.dwHighDateTime=0x1d5db47, ftLastWriteTime.dwLowDateTime=0xc2789120, ftLastWriteTime.dwHighDateTime=0x1d5db47, nFileSizeHigh=0x0, nFileSizeLow=0x6683, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUN1CdqIEA6.mp4", cAlternateFileName="BUN1CD~1.MP4")) returned 1 [0159.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10911f50, ftCreationTime.dwHighDateTime=0x1d5d7e0, ftLastAccessTime.dwLowDateTime=0xcd430770, ftLastAccessTime.dwHighDateTime=0x1d5e254, ftLastWriteTime.dwLowDateTime=0xcd430770, ftLastWriteTime.dwHighDateTime=0x1d5e254, nFileSizeHigh=0x0, nFileSizeLow=0xc208, dwReserved0=0x0, dwReserved1=0x0, cFileName="c g mHXRbSPW2UIxwV2J.mkv", cAlternateFileName="CGMHXR~1.MKV")) returned 1 [0159.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVvF81iFSwzuz3npmnNs", cAlternateFileName="IVVF81~1")) returned 1 [0159.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5667410, ftCreationTime.dwHighDateTime=0x1d5dd1b, ftLastAccessTime.dwLowDateTime=0x50899250, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0x50899250, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x755e, dwReserved0=0x0, dwReserved1=0x0, cFileName="vAzI.flv", cAlternateFileName="")) returned 1 [0159.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5667410, ftCreationTime.dwHighDateTime=0x1d5dd1b, ftLastAccessTime.dwLowDateTime=0x50899250, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0x50899250, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x755e, dwReserved0=0x0, dwReserved1=0x0, cFileName="vAzI.flv", cAlternateFileName="")) returned 0 [0159.373] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0159.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0159.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", lpFilePart=0x0) returned 0x7a [0159.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.374] GetFileType (hFile=0x344) returned 0x1 [0159.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.374] GetFileType (hFile=0x344) returned 0x1 [0159.374] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0xc568 [0159.374] ReadFile (in: hFile=0x344, lpBuffer=0x275b3b0, nNumberOfBytesToRead=0xc568, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x275b3b0*, lpNumberOfBytesRead=0x12da38*=0xc568, lpOverlapped=0x0) returned 1 [0159.376] CloseHandle (hObject=0x344) returned 1 [0159.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", lpFilePart=0x0) returned 0x7a [0159.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0159.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.534] GetFileType (hFile=0x344) returned 0x1 [0159.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0159.535] GetFileType (hFile=0x344) returned 0x1 [0159.535] WriteFile (in: hFile=0x344, lpBuffer=0x27dd0e8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x27dd0e8*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0159.536] CloseHandle (hObject=0x344) returned 1 [0159.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", lpFilePart=0x0) returned 0x7a [0159.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.578] GetFileType (hFile=0x344) returned 0x1 [0159.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.578] GetFileType (hFile=0x344) returned 0x1 [0159.578] WriteFile (in: hFile=0x344, lpBuffer=0x27cf480*, nNumberOfBytesToWrite=0xc570, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x27cf480*, lpNumberOfBytesWritten=0x12da98*=0xc570, lpOverlapped=0x0) returned 1 [0159.581] CloseHandle (hObject=0x344) returned 1 [0159.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv", lpFilePart=0x0) returned 0x7a [0159.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv.SYMMYWARE", lpFilePart=0x0) returned 0x84 [0159.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e081a0, ftCreationTime.dwHighDateTime=0x1d5df68, ftLastAccessTime.dwLowDateTime=0x68f4f3d0, ftLastAccessTime.dwHighDateTime=0x1d5e2fb, ftLastWriteTime.dwLowDateTime=0xcbbd900, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xc570)) returned 1 [0159.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0159.616] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\6pJXeiUpJzOmhAJ5P.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\6pjxeiupjzomhaj5p.flv.symmyware")) returned 1 [0159.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", lpFilePart=0x0) returned 0x79 [0159.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.628] GetFileType (hFile=0x344) returned 0x1 [0159.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.646] GetFileType (hFile=0x344) returned 0x1 [0159.646] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x15b04 [0159.654] ReadFile (in: hFile=0x344, lpBuffer=0x1279f3e8, nNumberOfBytesToRead=0x15b04, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x1279f3e8*, lpNumberOfBytesRead=0x12da38*=0x15b04, lpOverlapped=0x0) returned 1 [0159.656] CloseHandle (hObject=0x344) returned 1 [0159.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", lpFilePart=0x0) returned 0x79 [0159.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0159.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.671] GetFileType (hFile=0x344) returned 0x1 [0159.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0159.672] GetFileType (hFile=0x344) returned 0x1 [0159.672] WriteFile (in: hFile=0x344, lpBuffer=0x282eda8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x282eda8*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0159.673] CloseHandle (hObject=0x344) returned 1 [0159.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", lpFilePart=0x0) returned 0x79 [0159.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.674] GetFileType (hFile=0x344) returned 0x1 [0159.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.674] GetFileType (hFile=0x344) returned 0x1 [0159.674] WriteFile (in: hFile=0x344, lpBuffer=0x1280bbd0*, nNumberOfBytesToWrite=0x15b10, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x1280bbd0*, lpNumberOfBytesWritten=0x12da98*=0x15b10, lpOverlapped=0x0) returned 1 [0159.677] CloseHandle (hObject=0x344) returned 1 [0159.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv", lpFilePart=0x0) returned 0x79 [0159.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv.SYMMYWARE", lpFilePart=0x0) returned 0x83 [0159.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39711ca0, ftCreationTime.dwHighDateTime=0x1d5e63f, ftLastAccessTime.dwLowDateTime=0x725f1270, ftLastAccessTime.dwHighDateTime=0x1d5ddb5, ftLastWriteTime.dwLowDateTime=0xcca09d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x15b10)) returned 1 [0159.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0159.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\7fI2hqrhX10IipkL.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\7fi2hqrhx10iipkl.flv.symmyware")) returned 1 [0159.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", lpFilePart=0x0) returned 0x74 [0159.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.714] GetFileType (hFile=0x344) returned 0x1 [0159.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.714] GetFileType (hFile=0x344) returned 0x1 [0159.714] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x6683 [0159.714] ReadFile (in: hFile=0x344, lpBuffer=0x2830530, nNumberOfBytesToRead=0x6683, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x2830530*, lpNumberOfBytesRead=0x12da38*=0x6683, lpOverlapped=0x0) returned 1 [0159.715] CloseHandle (hObject=0x344) returned 1 [0159.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", lpFilePart=0x0) returned 0x74 [0159.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0159.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.724] GetFileType (hFile=0x344) returned 0x1 [0159.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0159.724] GetFileType (hFile=0x344) returned 0x1 [0159.724] WriteFile (in: hFile=0x344, lpBuffer=0x28a7208*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x28a7208*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0159.725] CloseHandle (hObject=0x344) returned 1 [0159.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", lpFilePart=0x0) returned 0x74 [0159.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.726] GetFileType (hFile=0x344) returned 0x1 [0159.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.726] GetFileType (hFile=0x344) returned 0x1 [0159.726] WriteFile (in: hFile=0x344, lpBuffer=0x289f498*, nNumberOfBytesToWrite=0x6690, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x289f498*, lpNumberOfBytesWritten=0x12da98*=0x6690, lpOverlapped=0x0) returned 1 [0159.732] CloseHandle (hObject=0x344) returned 1 [0159.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4", lpFilePart=0x0) returned 0x74 [0159.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4.SYMMYWARE", lpFilePart=0x0) returned 0x7e [0159.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586eff40, ftCreationTime.dwHighDateTime=0x1d5ded4, ftLastAccessTime.dwLowDateTime=0xc2789120, ftLastAccessTime.dwHighDateTime=0x1d5db47, ftLastWriteTime.dwLowDateTime=0xcd1aaf0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x6690)) returned 1 [0159.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0159.733] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\BUN1CdqIEA6.mp4.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\bun1cdqiea6.mp4.symmyware")) returned 1 [0159.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", lpFilePart=0x0) returned 0x6d [0159.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.734] GetFileType (hFile=0x344) returned 0x1 [0159.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.735] GetFileType (hFile=0x344) returned 0x1 [0159.735] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x755e [0159.735] ReadFile (in: hFile=0x344, lpBuffer=0x28a8920, nNumberOfBytesToRead=0x755e, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x28a8920*, lpNumberOfBytesRead=0x12da38*=0x755e, lpOverlapped=0x0) returned 1 [0159.736] CloseHandle (hObject=0x344) returned 1 [0159.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", lpFilePart=0x0) returned 0x6d [0159.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0159.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.878] GetFileType (hFile=0x344) returned 0x1 [0159.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0159.878] GetFileType (hFile=0x344) returned 0x1 [0159.878] WriteFile (in: hFile=0x344, lpBuffer=0x272da60*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d8f8, lpOverlapped=0x0 | out: lpBuffer=0x272da60*, lpNumberOfBytesWritten=0x12d8f8*=0x36, lpOverlapped=0x0) returned 1 [0159.880] CloseHandle (hObject=0x344) returned 1 [0159.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", lpFilePart=0x0) returned 0x6d [0159.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0159.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.881] GetFileType (hFile=0x344) returned 0x1 [0159.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0159.882] GetFileType (hFile=0x344) returned 0x1 [0159.882] WriteFile (in: hFile=0x344, lpBuffer=0x2724e38*, nNumberOfBytesToWrite=0x7560, lpNumberOfBytesWritten=0x12da98, lpOverlapped=0x0 | out: lpBuffer=0x2724e38*, lpNumberOfBytesWritten=0x12da98*=0x7560, lpOverlapped=0x0) returned 1 [0159.884] CloseHandle (hObject=0x344) returned 1 [0159.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv", lpFilePart=0x0) returned 0x6d [0159.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv.SYMMYWARE", lpFilePart=0x0) returned 0x77 [0159.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5667410, ftCreationTime.dwHighDateTime=0x1d5dd1b, ftLastAccessTime.dwLowDateTime=0x50899250, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0xce81920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x7560)) returned 1 [0159.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0159.885] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\vAzI.flv.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\vazi.flv.symmyware")) returned 1 [0159.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs", lpFilePart=0x0) returned 0x79 [0159.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\", lpFilePart=0x0) returned 0x7a [0159.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.910] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.911] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3446cfc0, ftCreationTime.dwHighDateTime=0x1d5e691, ftLastAccessTime.dwLowDateTime=0x749615f0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0x749615f0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9EG71TV-uMdk_-v.avi", cAlternateFileName="9EG71T~1.AVI")) returned 1 [0159.911] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.911] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0159.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0159.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs", lpFilePart=0x0) returned 0x79 [0159.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\", lpFilePart=0x0) returned 0x7a [0159.912] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\*", lpFindFileData=0x12d710 | out: lpFindFileData=0x12d710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11041a60, ftCreationTime.dwHighDateTime=0x1d5de4c, ftLastAccessTime.dwLowDateTime=0x284f22b0, ftLastAccessTime.dwHighDateTime=0x1d5e1b6, ftLastWriteTime.dwLowDateTime=0x284f22b0, ftLastWriteTime.dwHighDateTime=0x1d5e1b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.913] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3446cfc0, ftCreationTime.dwHighDateTime=0x1d5e691, ftLastAccessTime.dwLowDateTime=0x749615f0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0x749615f0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9EG71TV-uMdk_-v.avi", cAlternateFileName="9EG71T~1.AVI")) returned 1 [0159.914] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d760 | out: lpFindFileData=0x12d760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3446cfc0, ftCreationTime.dwHighDateTime=0x1d5e691, ftLastAccessTime.dwLowDateTime=0x749615f0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0x749615f0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9EG71TV-uMdk_-v.avi", cAlternateFileName="9EG71T~1.AVI")) returned 0 [0159.914] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9c0) returned 1 [0159.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d980) returned 1 [0159.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", nBufferLength=0x105, lpBuffer=0x12d410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", lpFilePart=0x0) returned 0x8d [0159.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0159.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.915] GetFileType (hFile=0x344) returned 0x1 [0159.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d860) returned 1 [0159.915] GetFileType (hFile=0x344) returned 0x1 [0159.915] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12da88 | out: lpFileSizeHigh=0x12da88*=0x0) returned 0x45c [0159.915] ReadFile (in: hFile=0x344, lpBuffer=0x2732818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d9b8, lpOverlapped=0x0 | out: lpBuffer=0x2732818*, lpNumberOfBytesRead=0x12d9b8*=0x45c, lpOverlapped=0x0) returned 1 [0159.917] CloseHandle (hObject=0x344) returned 1 [0159.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", nBufferLength=0x105, lpBuffer=0x12d350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", lpFilePart=0x0) returned 0x8d [0159.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d830) returned 1 [0159.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.929] GetFileType (hFile=0x344) returned 0x1 [0159.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d7a0) returned 1 [0159.929] GetFileType (hFile=0x344) returned 0x1 [0159.929] WriteFile (in: hFile=0x344, lpBuffer=0x2785590*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d878, lpOverlapped=0x0 | out: lpBuffer=0x2785590*, lpNumberOfBytesWritten=0x12d878*=0x36, lpOverlapped=0x0) returned 1 [0159.930] CloseHandle (hObject=0x344) returned 1 [0159.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", nBufferLength=0x105, lpBuffer=0x12d410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", lpFilePart=0x0) returned 0x8d [0159.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8f0) returned 1 [0159.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.932] GetFileType (hFile=0x344) returned 0x1 [0159.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d860) returned 1 [0159.932] GetFileType (hFile=0x344) returned 0x1 [0159.932] WriteFile (in: hFile=0x344, lpBuffer=0x27867a8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x12d8c8, lpOverlapped=0x0 | out: lpBuffer=0x27867a8*, lpNumberOfBytesWritten=0x12d8c8*=0x460, lpOverlapped=0x0) returned 1 [0159.933] CloseHandle (hObject=0x344) returned 1 [0159.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi", lpFilePart=0x0) returned 0x8d [0159.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi.SYMMYWARE", lpFilePart=0x0) returned 0x97 [0159.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9f0) returned 1 [0159.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dad0 | out: lpFileInformation=0x12dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3446cfc0, ftCreationTime.dwHighDateTime=0x1d5e691, ftLastAccessTime.dwLowDateTime=0x749615f0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0xcef6c20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0159.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0159.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\9EG71TV-uMdk_-v.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\9eg71tv-umdk_-v.avi.symmyware")) returned 1 [0159.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x87 [0159.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8c0) returned 1 [0159.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\iVvF81iFSwzuz3npmnNs\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\ivvf81ifswzuz3npmnns\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.936] GetFileType (hFile=0x344) returned 0x1 [0159.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d830) returned 1 [0159.936] GetFileType (hFile=0x344) returned 0x1 [0159.937] WriteFile (in: hFile=0x344, lpBuffer=0x2789ee0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d968, lpOverlapped=0x0 | out: lpBuffer=0x2789ee0*, lpNumberOfBytesWritten=0x12d968*=0x4aa, lpOverlapped=0x0) returned 1 [0159.938] CloseHandle (hObject=0x344) returned 1 [0159.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x72 [0159.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0159.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\g-4aH\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\g-4ah\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.939] GetFileType (hFile=0x344) returned 0x1 [0159.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0159.939] GetFileType (hFile=0x344) returned 0x1 [0159.940] WriteFile (in: hFile=0x344, lpBuffer=0x278d258*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12d9e8, lpOverlapped=0x0 | out: lpBuffer=0x278d258*, lpNumberOfBytesWritten=0x12d9e8*=0x4aa, lpOverlapped=0x0) returned 1 [0159.951] CloseHandle (hObject=0x344) returned 1 [0159.951] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6c [0159.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0159.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\A2XyvDWjK\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\a2xyvdwjk\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.952] GetFileType (hFile=0x344) returned 0x1 [0159.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0159.966] GetFileType (hFile=0x344) returned 0x1 [0159.967] WriteFile (in: hFile=0x344, lpBuffer=0x27905c0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x27905c0*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0159.968] CloseHandle (hObject=0x344) returned 1 [0159.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x62 [0159.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0159.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\4p1O\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\4p1o\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0159.969] GetFileType (hFile=0x344) returned 0x1 [0159.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0159.969] GetFileType (hFile=0x344) returned 0x1 [0159.970] WriteFile (in: hFile=0x344, lpBuffer=0x27938f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x27938f8*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0159.971] CloseHandle (hObject=0x344) returned 1 [0159.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0159.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y", lpFilePart=0x0) returned 0x60 [0159.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\", lpFilePart=0x0) returned 0x61 [0159.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22f7060, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xc05c6300, ftLastAccessTime.dwHighDateTime=0x1d5ded8, ftLastWriteTime.dwLowDateTime=0xc05c6300, ftLastWriteTime.dwHighDateTime=0x1d5ded8, nFileSizeHigh=0x0, nFileSizeLow=0xa68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="K5bUAWEEw0ryT.avi", cAlternateFileName="K5BUAW~1.AVI")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f71370, ftCreationTime.dwHighDateTime=0x1d5d80f, ftLastAccessTime.dwLowDateTime=0xd05a4aa0, ftLastAccessTime.dwHighDateTime=0x1d5e235, ftLastWriteTime.dwLowDateTime=0xd05a4aa0, ftLastWriteTime.dwHighDateTime=0x1d5e235, nFileSizeHigh=0x0, nFileSizeLow=0x12cf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NiJIc3vb9L.avi", cAlternateFileName="NIJIC3~1.AVI")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b80ff0, ftCreationTime.dwHighDateTime=0x1d5dc35, ftLastAccessTime.dwLowDateTime=0xf1921630, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0xf1921630, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xc3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="q4Tw92J W0Xlvr-m.swf", cAlternateFileName="Q4TW92~1.SWF")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.973] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0159.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0159.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0159.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y", lpFilePart=0x0) returned 0x60 [0159.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\", lpFilePart=0x0) returned 0x61 [0159.974] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0159.974] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ffe2d70, ftCreationTime.dwHighDateTime=0x1d5e5a3, ftLastAccessTime.dwLowDateTime=0x131b6560, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0x131b6560, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.974] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22f7060, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xc05c6300, ftLastAccessTime.dwHighDateTime=0x1d5ded8, ftLastWriteTime.dwLowDateTime=0xc05c6300, ftLastWriteTime.dwHighDateTime=0x1d5ded8, nFileSizeHigh=0x0, nFileSizeLow=0xa68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="K5bUAWEEw0ryT.avi", cAlternateFileName="K5BUAW~1.AVI")) returned 1 [0159.975] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f71370, ftCreationTime.dwHighDateTime=0x1d5d80f, ftLastAccessTime.dwLowDateTime=0xd05a4aa0, ftLastAccessTime.dwHighDateTime=0x1d5e235, ftLastWriteTime.dwLowDateTime=0xd05a4aa0, ftLastWriteTime.dwHighDateTime=0x1d5e235, nFileSizeHigh=0x0, nFileSizeLow=0x12cf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NiJIc3vb9L.avi", cAlternateFileName="NIJIC3~1.AVI")) returned 1 [0159.975] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b80ff0, ftCreationTime.dwHighDateTime=0x1d5dc35, ftLastAccessTime.dwLowDateTime=0xf1921630, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0xf1921630, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xc3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="q4Tw92J W0Xlvr-m.swf", cAlternateFileName="Q4TW92~1.SWF")) returned 1 [0159.975] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b80ff0, ftCreationTime.dwHighDateTime=0x1d5dc35, ftLastAccessTime.dwLowDateTime=0xf1921630, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0xf1921630, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xc3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="q4Tw92J W0Xlvr-m.swf", cAlternateFileName="Q4TW92~1.SWF")) returned 0 [0159.976] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0159.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0159.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0159.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", lpFilePart=0x0) returned 0x72 [0159.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0159.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0159.976] GetFileType (hFile=0x344) returned 0x1 [0159.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0159.976] GetFileType (hFile=0x344) returned 0x1 [0159.976] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0xa68e [0159.977] ReadFile (in: hFile=0x344, lpBuffer=0x27982f8, nNumberOfBytesToRead=0xa68e, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x27982f8*, lpNumberOfBytesRead=0x12db38*=0xa68e, lpOverlapped=0x0) returned 1 [0159.978] CloseHandle (hObject=0x344) returned 1 [0160.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", lpFilePart=0x0) returned 0x72 [0160.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0160.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.049] GetFileType (hFile=0x344) returned 0x1 [0160.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0160.049] GetFileType (hFile=0x344) returned 0x1 [0160.050] WriteFile (in: hFile=0x344, lpBuffer=0x28122b8*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x28122b8*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0160.051] CloseHandle (hObject=0x344) returned 1 [0160.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", lpFilePart=0x0) returned 0x72 [0160.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0160.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.052] GetFileType (hFile=0x344) returned 0x1 [0160.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0160.052] GetFileType (hFile=0x344) returned 0x1 [0160.052] WriteFile (in: hFile=0x344, lpBuffer=0x2806548*, nNumberOfBytesToWrite=0xa690, lpNumberOfBytesWritten=0x12db98, lpOverlapped=0x0 | out: lpBuffer=0x2806548*, lpNumberOfBytesWritten=0x12db98*=0xa690, lpOverlapped=0x0) returned 1 [0160.054] CloseHandle (hObject=0x344) returned 1 [0160.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi", lpFilePart=0x0) returned 0x72 [0160.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi.SYMMYWARE", lpFilePart=0x0) returned 0x7c [0160.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0160.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22f7060, ftCreationTime.dwHighDateTime=0x1d5d942, ftLastAccessTime.dwLowDateTime=0xc05c6300, ftLastAccessTime.dwHighDateTime=0x1d5ded8, ftLastWriteTime.dwLowDateTime=0xcff4aa0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xa690)) returned 1 [0160.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\K5bUAWEEw0ryT.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\k5buaweew0ryt.avi.symmyware")) returned 1 [0160.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", lpFilePart=0x0) returned 0x6f [0160.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0160.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.056] GetFileType (hFile=0x344) returned 0x1 [0160.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0160.056] GetFileType (hFile=0x344) returned 0x1 [0160.056] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x12cf2 [0160.056] ReadFile (in: hFile=0x344, lpBuffer=0x28139a8, nNumberOfBytesToRead=0x12cf2, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x28139a8*, lpNumberOfBytesRead=0x12db38*=0x12cf2, lpOverlapped=0x0) returned 1 [0160.058] CloseHandle (hObject=0x344) returned 1 [0160.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", lpFilePart=0x0) returned 0x6f [0160.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0160.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.068] GetFileType (hFile=0x344) returned 0x1 [0160.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0160.068] GetFileType (hFile=0x344) returned 0x1 [0160.068] WriteFile (in: hFile=0x344, lpBuffer=0x28af318*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12d9f8, lpOverlapped=0x0 | out: lpBuffer=0x28af318*, lpNumberOfBytesWritten=0x12d9f8*=0x36, lpOverlapped=0x0) returned 1 [0160.069] CloseHandle (hObject=0x344) returned 1 [0160.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", lpFilePart=0x0) returned 0x6f [0160.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0160.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.072] GetFileType (hFile=0x344) returned 0x1 [0160.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0160.072] GetFileType (hFile=0x344) returned 0x1 [0160.072] WriteFile (in: hFile=0x344, lpBuffer=0x289af48*, nNumberOfBytesToWrite=0x12d00, lpNumberOfBytesWritten=0x12db98, lpOverlapped=0x0 | out: lpBuffer=0x289af48*, lpNumberOfBytesWritten=0x12db98*=0x12d00, lpOverlapped=0x0) returned 1 [0160.075] CloseHandle (hObject=0x344) returned 1 [0160.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi", lpFilePart=0x0) returned 0x6f [0160.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi.SYMMYWARE", lpFilePart=0x0) returned 0x79 [0160.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0160.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f71370, ftCreationTime.dwHighDateTime=0x1d5d80f, ftLastAccessTime.dwLowDateTime=0xd05a4aa0, ftLastAccessTime.dwHighDateTime=0x1d5e235, ftLastWriteTime.dwLowDateTime=0xd027ef0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x12d00)) returned 1 [0160.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\NiJIc3vb9L.avi.SYMMYWARE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\nijic3vb9l.avi.symmyware")) returned 1 [0160.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0160.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0160.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\9m0FJjKiW79VNv8Y\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\9m0fjjkiw79vnv8y\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.077] GetFileType (hFile=0x344) returned 0x1 [0160.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0160.077] GetFileType (hFile=0x344) returned 0x1 [0160.078] WriteFile (in: hFile=0x344, lpBuffer=0x28b2b20*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x28b2b20*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.079] CloseHandle (hObject=0x344) returned 1 [0160.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5d [0160.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\NZHVW2A\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\nzhvw2a\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.079] GetFileType (hFile=0x344) returned 0x1 [0160.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.079] GetFileType (hFile=0x344) returned 0x1 [0160.080] WriteFile (in: hFile=0x344, lpBuffer=0x28b5e48*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x28b5e48*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.081] CloseHandle (hObject=0x344) returned 1 [0160.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0160.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\0pUrkp-xNlbZrfPeQ x\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\0purkp-xnlbzrfpeq x\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.082] GetFileType (hFile=0x344) returned 0x1 [0160.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.082] GetFileType (hFile=0x344) returned 0x1 [0160.082] WriteFile (in: hFile=0x344, lpBuffer=0x28b9150*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x28b9150*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.083] CloseHandle (hObject=0x344) returned 1 [0160.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0160.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\N_ kGmP-m6Q6Jm\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\n_ kgmp-m6q6jm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.084] GetFileType (hFile=0x344) returned 0x1 [0160.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.084] GetFileType (hFile=0x344) returned 0x1 [0160.085] WriteFile (in: hFile=0x344, lpBuffer=0x28bc408*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28bc408*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.086] CloseHandle (hObject=0x344) returned 1 [0160.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F", lpFilePart=0x0) returned 0x35 [0160.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\", lpFilePart=0x0) returned 0x36 [0160.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.086] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec316f0, ftCreationTime.dwHighDateTime=0x1d5de8d, ftLastAccessTime.dwLowDateTime=0x5ea79be0, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0x5ea79be0, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x1758f, dwReserved0=0x0, dwReserved1=0x0, cFileName="9y3UD9.mkv", cAlternateFileName="")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1ec8d10, ftCreationTime.dwHighDateTime=0x1d5e5c2, ftLastAccessTime.dwLowDateTime=0x35964f20, ftLastAccessTime.dwHighDateTime=0x1d5e7ce, ftLastWriteTime.dwLowDateTime=0x35964f20, ftLastWriteTime.dwHighDateTime=0x1d5e7ce, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="YwA7u.mkv", cAlternateFileName="")) returned 1 [0160.087] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.087] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F", lpFilePart=0x0) returned 0x35 [0160.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\", lpFilePart=0x0) returned 0x36 [0160.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ee0b420, ftCreationTime.dwHighDateTime=0x1d5d914, ftLastAccessTime.dwLowDateTime=0x5781c9f0, ftLastAccessTime.dwHighDateTime=0x1d5dfa1, ftLastWriteTime.dwLowDateTime=0x5781c9f0, ftLastWriteTime.dwHighDateTime=0x1d5dfa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec316f0, ftCreationTime.dwHighDateTime=0x1d5de8d, ftLastAccessTime.dwLowDateTime=0x5ea79be0, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0x5ea79be0, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x1758f, dwReserved0=0x0, dwReserved1=0x0, cFileName="9y3UD9.mkv", cAlternateFileName="")) returned 1 [0160.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1ec8d10, ftCreationTime.dwHighDateTime=0x1d5e5c2, ftLastAccessTime.dwLowDateTime=0x35964f20, ftLastAccessTime.dwHighDateTime=0x1d5e7ce, ftLastWriteTime.dwLowDateTime=0x35964f20, ftLastWriteTime.dwHighDateTime=0x1d5e7ce, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="YwA7u.mkv", cAlternateFileName="")) returned 1 [0160.088] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1ec8d10, ftCreationTime.dwHighDateTime=0x1d5e5c2, ftLastAccessTime.dwLowDateTime=0x35964f20, ftLastAccessTime.dwHighDateTime=0x1d5e7ce, ftLastWriteTime.dwLowDateTime=0x35964f20, ftLastWriteTime.dwHighDateTime=0x1d5e7ce, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="YwA7u.mkv", cAlternateFileName="")) returned 0 [0160.089] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0160.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\wCDfqU5REgrHg86F\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\wcdfqu5regrhg86f\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.089] GetFileType (hFile=0x344) returned 0x1 [0160.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.089] GetFileType (hFile=0x344) returned 0x1 [0160.090] WriteFile (in: hFile=0x344, lpBuffer=0x28c1bb8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x28c1bb8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.091] CloseHandle (hObject=0x344) returned 1 [0160.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0160.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.092] GetFileType (hFile=0x344) returned 0x1 [0160.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.092] GetFileType (hFile=0x344) returned 0x1 [0160.092] WriteFile (in: hFile=0x344, lpBuffer=0x28c4e30*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x28c4e30*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.094] CloseHandle (hObject=0x344) returned 1 [0160.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2b [0160.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0160.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SYMMYWARE.TXT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.095] GetFileType (hFile=0x344) returned 0x1 [0160.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0160.095] GetFileType (hFile=0x344) returned 0x1 [0160.096] WriteFile (in: hFile=0x344, lpBuffer=0x28c8088*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x28c8088*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.098] CloseHandle (hObject=0x344) returned 1 [0160.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0160.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0160.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0160.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbde1170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.099] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbde1170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0160.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0160.100] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0160.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0160.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0160.101] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0160.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0160.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0160.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0160.102] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0160.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0160.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0160.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbde1170, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec245a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.103] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0160.104] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0160.104] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0160.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0160.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0160.104] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0160.104] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0160.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbde1170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.105] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbde1170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0160.107] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0160.108] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0160.109] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbde1170, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbde1170, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec245a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0160.110] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.110] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0160.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0160.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0160.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0160.111] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.111] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0160.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0160.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbda40e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda8f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.112] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.112] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0160.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0160.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.113] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0160.113] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0160.113] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.113] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbda40e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda8f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.114] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbda40e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbda40e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda8f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.114] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0160.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0160.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.114] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0160.115] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0160.115] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0160.115] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd42660, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd47480, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.116] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.116] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.116] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0160.116] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0160.116] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd42660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0160.117] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd42660, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd47480, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.118] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd42660, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd42660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd47480, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.118] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0160.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0160.118] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0160.119] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd3d840, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3ff50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.120] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.120] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.120] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0160.120] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0160.120] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3d840, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0160.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd3d840, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3ff50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.121] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd3d840, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd3d840, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3ff50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.122] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0160.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0160.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd36310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.123] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.124] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.124] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0160.124] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0160.124] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.124] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd36310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0160.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd36310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.125] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd36310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd36310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd3b130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.125] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0160.126] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0160.126] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0160.126] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.126] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0160.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd278b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd2ede0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.127] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.127] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0160.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0160.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0160.127] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0160.127] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0160.127] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd278b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0160.128] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd278b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd2ede0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.129] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd278b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd278b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd2ede0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.129] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0160.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0160.129] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0160.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0160.129] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0160.132] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0160.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.132] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.134] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0160.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.134] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.136] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0160.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.136] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\acrobat\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.159] WriteFile (in: hFile=0x344, lpBuffer=0x26f3088*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26f3088*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.160] CloseHandle (hObject=0x344) returned 1 [0160.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.161] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0160.161] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0160.161] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.161] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0160.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd9f2c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.162] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.162] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.163] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0160.163] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0160.163] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.163] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0160.164] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd9f2c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.165] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbd9f2c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd9f2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbda40e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.165] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.165] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0160.165] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0160.166] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.166] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.166] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0160.167] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0160.167] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0160.167] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd97d90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.168] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.168] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.168] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0160.168] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0160.169] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd97d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.169] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0160.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0160.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0160.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd97d90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.170] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd97d90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbd97d90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbd9f2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.171] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.171] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0160.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.171] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.172] GetFileType (hFile=0x344) returned 0x1 [0160.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.172] GetFileType (hFile=0x344) returned 0x1 [0160.172] WriteFile (in: hFile=0x344, lpBuffer=0x26fafd0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26fafd0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.174] CloseHandle (hObject=0x344) returned 1 [0160.174] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0160.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\arm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.175] GetFileType (hFile=0x344) returned 0x1 [0160.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.175] GetFileType (hFile=0x344) returned 0x1 [0160.175] WriteFile (in: hFile=0x344, lpBuffer=0x26fe228*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26fe228*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.177] CloseHandle (hObject=0x344) returned 1 [0160.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0160.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\adobe\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.177] GetFileType (hFile=0x344) returned 0x1 [0160.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.177] GetFileType (hFile=0x344) returned 0x1 [0160.178] WriteFile (in: hFile=0x344, lpBuffer=0x2701470*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2701470*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.179] CloseHandle (hObject=0x344) returned 1 [0160.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.179] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0160.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\", lpFilePart=0x0) returned 0x24 [0160.180] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0160.185] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0160.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.185] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.185] GetFileType (hFile=0x344) returned 0x1 [0160.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.185] GetFileType (hFile=0x344) returned 0x1 [0160.186] WriteFile (in: hFile=0x344, lpBuffer=0x27059e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27059e0*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.187] CloseHandle (hObject=0x344) returned 1 [0160.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.187] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0160.187] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\", lpFilePart=0x0) returned 0x1b [0160.188] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0160.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0160.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.193] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\desktop\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.194] GetFileType (hFile=0x344) returned 0x1 [0160.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.194] GetFileType (hFile=0x344) returned 0x1 [0160.195] WriteFile (in: hFile=0x344, lpBuffer=0x2709e80*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2709e80*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.196] CloseHandle (hObject=0x344) returned 1 [0160.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0160.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\", lpFilePart=0x0) returned 0x1d [0160.197] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0160.202] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0160.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.203] GetFileType (hFile=0x344) returned 0x1 [0160.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.203] GetFileType (hFile=0x344) returned 0x1 [0160.204] WriteFile (in: hFile=0x344, lpBuffer=0x270e348*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x270e348*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.206] CloseHandle (hObject=0x344) returned 1 [0160.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.206] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites", lpFilePart=0x0) returned 0x1c [0160.207] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\", lpFilePart=0x0) returned 0x1d [0160.207] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0160.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0160.211] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0160.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0160.211] CreateFileW (lpFileName="C:\\Users\\All Users\\Favorites\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\favorites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.211] GetFileType (hFile=0x344) returned 0x1 [0160.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0160.212] GetFileType (hFile=0x344) returned 0x1 [0160.213] WriteFile (in: hFile=0x344, lpBuffer=0x2712810*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2712810*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0160.214] CloseHandle (hObject=0x344) returned 1 [0160.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.214] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0160.214] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0160.214] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0160.215] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0160.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0160.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0160.216] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0160.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0160.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0160.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0160.217] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0160.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0160.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0160.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0160.218] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0160.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0160.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5d1b30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5d1b30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0160.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe635cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe635cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0160.219] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe695030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe695030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0160.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe845240, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe84c770, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7adc60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7adc60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0160.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b78a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7b78a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0160.220] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xfe80a8c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe80a8c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0160.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0160.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0160.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0160.221] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe83b600, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe83b600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0160.222] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe83b600, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe83b600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0160.222] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0160.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0160.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0160.222] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0160.222] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0160.222] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.223] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe845240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.223] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0160.223] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0160.226] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0160.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0160.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0160.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0160.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0160.227] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0160.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0160.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5d1b30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5d1b30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0160.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe635cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe635cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0160.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe695030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe695030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0160.228] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe845240, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe845240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe84c770, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7adc60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7adc60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0160.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b78a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7b78a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0160.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xfe80a8c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe80a8c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0160.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0160.229] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0160.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0160.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe83b600, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe83b600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0160.230] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.230] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0160.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0160.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0160.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0160.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.231] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0160.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf39540, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf40a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.232] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.232] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0160.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0160.232] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf39540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0160.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf39540, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf40a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.233] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf39540, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf39540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf40a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.233] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0160.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0160.234] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.234] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0160.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf2d1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf36e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.235] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.235] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0160.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0160.236] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2d1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0160.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf2d1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf36e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.236] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf2d1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf2d1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf36e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.237] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.237] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0160.237] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0160.237] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.237] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0160.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf25cc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2aae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.238] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.238] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.238] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0160.238] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0160.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf25cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0160.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf25cc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2aae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.239] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf25cc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf25cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf2aae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.240] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0160.240] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0160.240] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0160.240] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0160.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0160.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0160.241] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0160.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0160.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0160.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0160.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf039e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf0af10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.242] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.243] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0160.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0160.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0160.243] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0160.243] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0160.243] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf039e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.243] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0160.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0160.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0160.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0160.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0160.244] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0160.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0160.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf039e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf0af10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.245] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf039e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf039e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf0af10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.245] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0160.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0160.246] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x46 [0160.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0160.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.246] GetFileType (hFile=0x344) returned 0x1 [0160.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0160.246] GetFileType (hFile=0x344) returned 0x1 [0160.248] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x40 [0160.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.248] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.248] GetFileType (hFile=0x344) returned 0x1 [0160.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.248] GetFileType (hFile=0x344) returned 0x1 [0160.250] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0160.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.250] GetFileType (hFile=0x344) returned 0x1 [0160.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.250] GetFileType (hFile=0x344) returned 0x1 [0160.251] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0160.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.252] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.252] GetFileType (hFile=0x344) returned 0x1 [0160.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.252] GetFileType (hFile=0x344) returned 0x1 [0160.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.253] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0160.253] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0160.254] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0160.254] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0160.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0160.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc0102c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0177f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.255] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.256] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.256] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0160.256] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0160.256] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0160.257] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0160.258] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0160.258] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc0102c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0177f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.260] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc0102c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc0102c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0177f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.260] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.260] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0160.261] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0160.261] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.261] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0160.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf85030, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf8c560, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.262] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.262] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.263] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0160.263] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0160.263] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.263] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.263] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0160.263] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf85030, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf8c560, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.263] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbf85030, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf85030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf8c560, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.264] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.264] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0160.264] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0160.264] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.264] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.265] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf7db00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.265] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.265] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.265] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0160.265] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0160.265] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf7db00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf7db00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf7db00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbf7db00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbf85030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.266] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.266] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0160.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.267] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.267] GetFileType (hFile=0x344) returned 0x1 [0160.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.267] GetFileType (hFile=0x344) returned 0x1 [0160.269] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0160.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.269] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.269] GetFileType (hFile=0x344) returned 0x1 [0160.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0160.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x29 [0160.303] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfbab90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfc47d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.304] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.304] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0160.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x29 [0160.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.308] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfbab90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.308] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfbab90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfc47d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.308] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfbab90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfbab90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfc47d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.308] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.309] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0160.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.311] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0160.311] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x28 [0160.312] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.312] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.312] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0160.312] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0160.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc00b4a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.313] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.313] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.316] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0160.316] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x28 [0160.316] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc00b4a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0160.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0160.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc00b4a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.317] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc00b4a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc00b4a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc0102c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.317] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0160.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0160.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.318] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfdce70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfe1c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.319] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.319] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.319] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0160.319] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0160.319] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfdce70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfdce70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfe1c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.320] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfdce70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbfdce70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbfe1c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.320] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0160.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.321] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0160.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x31 [0160.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0160.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0160.323] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbffa330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbffa330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc008d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.324] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0160.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x31 [0160.324] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.324] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc003f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc003f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0160.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0160.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbffa330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbffa330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc008d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.325] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbffa330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbffa330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc008d90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.325] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.325] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0160.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.326] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.327] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0160.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0160.328] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0160.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0160.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0160.330] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\crypto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0160.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.331] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0160.331] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x2a [0160.332] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0160.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdfd6f00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfe0b40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0160.332] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0160.332] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0160.333] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0160.333] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x2a [0160.333] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0160.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdfd6f00, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfd6f00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfe0b40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0160.333] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.333] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0160.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0160.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0160.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x31 [0160.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.334] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcc7d530, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfcc7d530, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc87170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0160.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0160.335] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0160.335] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0160.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x31 [0160.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc82350, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc82350, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcc7d530, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfcc7d530, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc87170, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0160.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0160.336] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.336] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0160.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0160.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0160.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x58 [0160.337] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6edfc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6f7c00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.337] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.337] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0160.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x58 [0160.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6edfc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0160.338] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6edfc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6f7c00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.339] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6edfc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfc6edfc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfc6f7c00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0160.339] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0160.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.340] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.340] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x1fad1 [0160.341] ReadFile (in: hFile=0x344, lpBuffer=0x1285be68, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x1285be68*, lpNumberOfBytesRead=0x12dbb8*=0x1fad1, lpOverlapped=0x0) returned 1 [0160.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0160.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0160.464] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0160.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0160.471] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0160.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.471] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.471] GetFileType (hFile=0x344) returned 0x1 [0160.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.471] GetFileType (hFile=0x344) returned 0x1 [0160.471] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xb61 [0160.472] ReadFile (in: hFile=0x344, lpBuffer=0x27b1558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27b1558*, lpNumberOfBytesRead=0x12dbb8*=0xb61, lpOverlapped=0x0) returned 1 [0160.473] CloseHandle (hObject=0x344) returned 1 [0160.578] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0160.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0160.579] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0160.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0160.583] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0160.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.583] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.583] GetFileType (hFile=0x344) returned 0x1 [0160.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.583] GetFileType (hFile=0x344) returned 0x1 [0160.583] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xadc8 [0160.584] ReadFile (in: hFile=0x344, lpBuffer=0x2805a80, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2805a80*, lpNumberOfBytesRead=0x12dbb8*=0xadc8, lpOverlapped=0x0) returned 1 [0160.585] CloseHandle (hObject=0x344) returned 1 [0160.666] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0160.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0160.666] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0160.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0160.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0160.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.672] GetFileType (hFile=0x344) returned 0x1 [0160.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.672] GetFileType (hFile=0x344) returned 0x1 [0160.672] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x70c1 [0160.672] ReadFile (in: hFile=0x344, lpBuffer=0x2880d98, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2880d98*, lpNumberOfBytesRead=0x12dbb8*=0x70c1, lpOverlapped=0x0) returned 1 [0160.674] CloseHandle (hObject=0x344) returned 1 [0160.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0160.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0160.803] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0160.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0160.808] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0160.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.808] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.808] GetFileType (hFile=0x344) returned 0x1 [0160.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.808] GetFileType (hFile=0x344) returned 0x1 [0160.808] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x99d3 [0160.809] ReadFile (in: hFile=0x344, lpBuffer=0x2711938, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2711938*, lpNumberOfBytesRead=0x12dbb8*=0x99d3, lpOverlapped=0x0) returned 1 [0160.810] CloseHandle (hObject=0x344) returned 1 [0160.901] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0160.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0160.902] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0160.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0160.910] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0160.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0160.911] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0160.911] GetFileType (hFile=0x344) returned 0x1 [0160.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0160.912] GetFileType (hFile=0x344) returned 0x1 [0160.913] WriteFile (in: hFile=0x344, lpBuffer=0x279d390*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x279d390*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0160.915] CloseHandle (hObject=0x344) returned 1 [0160.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.915] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0160.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x58 [0160.916] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.916] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.917] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0160.917] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0160.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc6ead0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfcc6ead0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc7ae20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.918] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0160.919] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.919] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0160.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0160.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x58 [0160.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0160.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfcc738f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc738f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.921] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0160.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0160.922] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc6ead0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfcc6ead0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfcc7ae20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0160.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0160.923] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0160.924] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0160.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0160.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0160.924] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0160.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0160.925] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0160.925] GetFileType (hFile=0x344) returned 0x1 [0160.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0160.925] GetFileType (hFile=0x344) returned 0x1 [0160.925] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x1fad1 [0160.926] ReadFile (in: hFile=0x344, lpBuffer=0x1292fc30, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x1292fc30*, lpNumberOfBytesRead=0x12dbb8*=0x1fad1, lpOverlapped=0x0) returned 1 [0160.928] CloseHandle (hObject=0x344) returned 1 [0161.051] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0161.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0161.051] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0161.056] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0161.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0161.056] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0161.057] GetFileType (hFile=0x344) returned 0x1 [0161.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0161.057] GetFileType (hFile=0x344) returned 0x1 [0161.057] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x769 [0161.057] ReadFile (in: hFile=0x344, lpBuffer=0x26c5f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x26c5f40*, lpNumberOfBytesRead=0x12dbb8*=0x769, lpOverlapped=0x0) returned 1 [0161.058] CloseHandle (hObject=0x344) returned 1 [0161.157] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0161.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0161.158] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0161.165] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0161.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0161.165] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0161.166] GetFileType (hFile=0x344) returned 0x1 [0161.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0161.166] GetFileType (hFile=0x344) returned 0x1 [0161.166] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x70c1 [0161.166] ReadFile (in: hFile=0x344, lpBuffer=0x2719280, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2719280*, lpNumberOfBytesRead=0x12dbb8*=0x70c1, lpOverlapped=0x0) returned 1 [0161.168] CloseHandle (hObject=0x344) returned 1 [0161.255] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0161.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0161.255] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0161.260] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x65 [0161.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0161.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0161.261] GetFileType (hFile=0x344) returned 0x1 [0161.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0161.261] GetFileType (hFile=0x344) returned 0x1 [0161.262] WriteFile (in: hFile=0x344, lpBuffer=0x2795468*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2795468*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0161.263] CloseHandle (hObject=0x344) returned 1 [0161.263] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0161.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0161.263] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0161.264] GetFileType (hFile=0x344) returned 0x1 [0161.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0161.264] GetFileType (hFile=0x344) returned 0x1 [0161.265] WriteFile (in: hFile=0x344, lpBuffer=0x2798710*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2798710*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0161.266] CloseHandle (hObject=0x344) returned 1 [0161.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0161.266] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0161.266] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2f [0161.266] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0161.266] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdfc84a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfc84a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0161.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0161.267] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0161.268] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0161.268] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0161.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0161.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0161.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0161.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0161.269] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2f [0161.269] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0161.269] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfcd2c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfcd2c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.269] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdfc84a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfc84a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfd6f00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0161.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0161.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0161.270] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.270] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0161.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0161.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0161.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0161.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0161.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x56 [0161.273] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0161.274] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.274] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0161.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0161.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0161.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd81d660, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd822480, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0161.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0161.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0161.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0161.370] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.370] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0161.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0161.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0161.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0161.371] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0161.371] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x56 [0161.371] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0161.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81d660, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0161.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0161.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0161.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0161.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0161.372] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd81d660, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfd81d660, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd822480, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0161.373] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0161.374] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0161.374] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0161.374] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0161.375] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0161.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0161.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0161.375] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x60 [0161.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0161.375] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0161.375] GetFileType (hFile=0x344) returned 0x1 [0161.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0161.375] GetFileType (hFile=0x344) returned 0x1 [0161.376] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xd0a3 [0161.376] ReadFile (in: hFile=0x344, lpBuffer=0x27a1b98, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27a1b98*, lpNumberOfBytesRead=0x12dbb8*=0xd0a3, lpOverlapped=0x0) returned 1 [0161.377] CloseHandle (hObject=0x344) returned 1 [0161.559] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x60 [0161.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0161.559] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0161.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x60 [0161.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0161.564] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0161.564] GetFileType (hFile=0x344) returned 0x1 [0161.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0161.564] GetFileType (hFile=0x344) returned 0x1 [0161.564] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x72ee [0161.564] ReadFile (in: hFile=0x344, lpBuffer=0x2825a38, nNumberOfBytesToRead=0x72ee, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2825a38*, lpNumberOfBytesRead=0x12dbb8*=0x72ee, lpOverlapped=0x0) returned 1 [0161.566] CloseHandle (hObject=0x344) returned 1 [0161.811] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x60 [0161.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0161.811] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0161.816] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x62 [0161.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0161.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0161.816] GetFileType (hFile=0x344) returned 0x1 [0161.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0161.816] GetFileType (hFile=0x344) returned 0x1 [0161.816] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x14668 [0161.816] ReadFile (in: hFile=0x344, lpBuffer=0x28a07b8, nNumberOfBytesToRead=0x14668, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x28a07b8*, lpNumberOfBytesRead=0x12dbb8*=0x14668, lpOverlapped=0x0) returned 1 [0161.818] CloseHandle (hObject=0x344) returned 1 [0162.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x62 [0162.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.020] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0162.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.024] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.024] GetFileType (hFile=0x344) returned 0x1 [0162.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.024] GetFileType (hFile=0x344) returned 0x1 [0162.024] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x536 [0162.024] ReadFile (in: hFile=0x344, lpBuffer=0x27584b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27584b8*, lpNumberOfBytesRead=0x12dbb8*=0x536, lpOverlapped=0x0) returned 1 [0162.025] CloseHandle (hObject=0x344) returned 1 [0162.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0162.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.112] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x63 [0162.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.113] GetFileType (hFile=0x344) returned 0x1 [0162.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.113] GetFileType (hFile=0x344) returned 0x1 [0162.113] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xcaa9 [0162.113] ReadFile (in: hFile=0x344, lpBuffer=0x27aacd0, nNumberOfBytesToRead=0xcaa9, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27aacd0*, lpNumberOfBytesRead=0x12dbb8*=0xcaa9, lpOverlapped=0x0) returned 1 [0162.114] CloseHandle (hObject=0x344) returned 1 [0162.200] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x63 [0162.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.201] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x62 [0162.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.210] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.210] GetFileType (hFile=0x344) returned 0x1 [0162.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.211] GetFileType (hFile=0x344) returned 0x1 [0162.211] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x10850 [0162.211] ReadFile (in: hFile=0x344, lpBuffer=0x282d380, nNumberOfBytesToRead=0x10850, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x282d380*, lpNumberOfBytesRead=0x12dbb8*=0x10850, lpOverlapped=0x0) returned 1 [0162.213] CloseHandle (hObject=0x344) returned 1 [0162.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x62 [0162.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5e [0162.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.307] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.308] GetFileType (hFile=0x344) returned 0x1 [0162.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.308] GetFileType (hFile=0x344) returned 0x1 [0162.308] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xc04b [0162.309] ReadFile (in: hFile=0x344, lpBuffer=0x28bf100, nNumberOfBytesToRead=0xc04b, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x28bf100*, lpNumberOfBytesRead=0x12dbb8*=0xc04b, lpOverlapped=0x0) returned 1 [0162.311] CloseHandle (hObject=0x344) returned 1 [0162.443] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5e [0162.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.443] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.449] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0162.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.450] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.450] GetFileType (hFile=0x344) returned 0x1 [0162.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.450] GetFileType (hFile=0x344) returned 0x1 [0162.450] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x3473 [0162.450] ReadFile (in: hFile=0x344, lpBuffer=0x274b718, nNumberOfBytesToRead=0x3473, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x274b718*, lpNumberOfBytesRead=0x12dbb8*=0x3473, lpOverlapped=0x0) returned 1 [0162.452] CloseHandle (hObject=0x344) returned 1 [0162.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0162.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.523] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x5d [0162.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.529] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.529] GetFileType (hFile=0x344) returned 0x1 [0162.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.529] GetFileType (hFile=0x344) returned 0x1 [0162.529] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x1b9f4 [0162.530] ReadFile (in: hFile=0x344, lpBuffer=0x12a047d0, nNumberOfBytesToRead=0x1b9f4, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x12a047d0*, lpNumberOfBytesRead=0x12dbb8*=0x1b9f4, lpOverlapped=0x0) returned 1 [0162.532] CloseHandle (hObject=0x344) returned 1 [0162.592] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x5d [0162.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.592] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0162.596] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0162.596] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", lpFilePart=0x0) returned 0x5c [0162.596] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0162.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0162.597] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd813a20, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfd813a20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81af50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0162.598] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.598] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0162.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0162.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0162.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0162.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0162.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\", lpFilePart=0x0) returned 0x5c [0162.599] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0162.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfd816130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd816130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.599] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0162.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd813a20, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfd813a20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81af50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0162.600] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd813a20, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfd813a20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfd81af50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0162.600] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0162.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0162.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0162.601] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0162.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0162.601] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.601] GetFileType (hFile=0x344) returned 0x1 [0162.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0162.601] GetFileType (hFile=0x344) returned 0x1 [0162.601] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x536 [0162.602] ReadFile (in: hFile=0x344, lpBuffer=0x28020a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x28020a8*, lpNumberOfBytesRead=0x12db38*=0x536, lpOverlapped=0x0) returned 1 [0162.603] CloseHandle (hObject=0x344) returned 1 [0162.658] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0162.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0162.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a2f0) returned 1 [0162.663] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0162.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0162.664] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0162.664] GetFileType (hFile=0x344) returned 0x1 [0162.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0162.664] GetFileType (hFile=0x344) returned 0x1 [0162.665] WriteFile (in: hFile=0x344, lpBuffer=0x2856840*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2856840*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0162.666] CloseHandle (hObject=0x344) returned 1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0162.666] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0162.667] GetFileType (hFile=0x344) returned 0x1 [0162.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0162.667] GetFileType (hFile=0x344) returned 0x1 [0162.668] WriteFile (in: hFile=0x344, lpBuffer=0x2859b78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2859b78*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0162.669] CloseHandle (hObject=0x344) returned 1 [0162.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0162.669] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0162.669] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x56 [0162.669] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0162.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0162.670] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0162.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0162.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0162.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0162.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0162.671] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfc0f70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc84a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.673] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0162.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0162.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x56 [0162.673] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0162.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc0f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0162.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0162.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0162.674] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0162.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0162.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0162.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0162.675] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0162.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfc0f70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfc0f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfc84a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0162.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0162.676] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0162.676] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0162.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0162.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0162.677] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x60 [0162.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.677] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.677] GetFileType (hFile=0x344) returned 0x1 [0162.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.677] GetFileType (hFile=0x344) returned 0x1 [0162.677] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xd0a3 [0162.677] ReadFile (in: hFile=0x344, lpBuffer=0x2860188, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2860188*, lpNumberOfBytesRead=0x12dbb8*=0xd0a3, lpOverlapped=0x0) returned 1 [0162.679] CloseHandle (hObject=0x344) returned 1 [0162.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x60 [0162.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x64 [0162.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.773] GetFileType (hFile=0x344) returned 0x1 [0162.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.773] GetFileType (hFile=0x344) returned 0x1 [0162.773] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xe3c8 [0162.774] ReadFile (in: hFile=0x344, lpBuffer=0x28e4038, nNumberOfBytesToRead=0xe3c8, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x28e4038*, lpNumberOfBytesRead=0x12dbb8*=0xe3c8, lpOverlapped=0x0) returned 1 [0162.776] CloseHandle (hObject=0x344) returned 1 [0162.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x64 [0162.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.854] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.859] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x68 [0162.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.859] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.859] GetFileType (hFile=0x344) returned 0x1 [0162.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.859] GetFileType (hFile=0x344) returned 0x1 [0162.859] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xebb8 [0162.859] ReadFile (in: hFile=0x344, lpBuffer=0x2770be0, nNumberOfBytesToRead=0xebb8, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2770be0*, lpNumberOfBytesRead=0x12dbb8*=0xebb8, lpOverlapped=0x0) returned 1 [0162.861] CloseHandle (hObject=0x344) returned 1 [0162.921] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x68 [0162.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x65 [0162.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.927] GetFileType (hFile=0x344) returned 0x1 [0162.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.927] GetFileType (hFile=0x344) returned 0x1 [0162.927] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xdff5 [0162.927] ReadFile (in: hFile=0x344, lpBuffer=0x27fb8e0, nNumberOfBytesToRead=0xdff5, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27fb8e0*, lpNumberOfBytesRead=0x12dbb8*=0xdff5, lpOverlapped=0x0) returned 1 [0162.929] CloseHandle (hObject=0x344) returned 1 [0162.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x65 [0162.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0162.989] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0162.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0162.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5f [0162.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0162.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0162.997] GetFileType (hFile=0x344) returned 0x1 [0162.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0162.997] GetFileType (hFile=0x344) returned 0x1 [0162.997] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xec75 [0162.997] ReadFile (in: hFile=0x344, lpBuffer=0x28834d0, nNumberOfBytesToRead=0xec75, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x28834d0*, lpNumberOfBytesRead=0x12dbb8*=0xec75, lpOverlapped=0x0) returned 1 [0162.998] CloseHandle (hObject=0x344) returned 1 [0163.075] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5f [0163.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0163.075] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0163.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0163.079] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x67 [0163.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0163.080] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0163.080] GetFileType (hFile=0x344) returned 0x1 [0163.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0163.080] GetFileType (hFile=0x344) returned 0x1 [0163.080] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x10654 [0163.080] ReadFile (in: hFile=0x344, lpBuffer=0x27070f0, nNumberOfBytesToRead=0x10654, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x27070f0*, lpNumberOfBytesRead=0x12dbb8*=0x10654, lpOverlapped=0x0) returned 1 [0163.082] CloseHandle (hObject=0x344) returned 1 [0163.138] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x67 [0163.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0163.138] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0163.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0163.161] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x67 [0163.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0163.161] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0163.161] GetFileType (hFile=0x344) returned 0x1 [0163.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0163.161] GetFileType (hFile=0x344) returned 0x1 [0163.162] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0xf8c2 [0163.162] ReadFile (in: hFile=0x344, lpBuffer=0x2798870, nNumberOfBytesToRead=0xf8c2, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2798870*, lpNumberOfBytesRead=0x12dbb8*=0xf8c2, lpOverlapped=0x0) returned 1 [0163.163] CloseHandle (hObject=0x344) returned 1 [0163.216] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x67 [0163.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0163.217] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0163.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0163.221] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0163.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0163.221] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0163.221] GetFileType (hFile=0x344) returned 0x1 [0163.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0163.221] GetFileType (hFile=0x344) returned 0x1 [0163.221] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x2c64 [0163.222] ReadFile (in: hFile=0x344, lpBuffer=0x28267d0, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x28267d0*, lpNumberOfBytesRead=0x12dbb8*=0x2c64, lpOverlapped=0x0) returned 1 [0163.223] CloseHandle (hObject=0x344) returned 1 [0163.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0163.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0163.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0163.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a370) returned 1 [0163.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0163.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", lpFilePart=0x0) returned 0x5c [0163.281] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.281] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.281] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0163.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfb7330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfbe860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.282] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.282] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.283] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0163.283] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\", lpFilePart=0x0) returned 0x5c [0163.283] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.284] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfb7330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.284] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0163.284] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfb7330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfbe860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.285] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdfb7330, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdfb7330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdfbe860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.285] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0163.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0163.286] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0163.286] GetFileType (hFile=0x344) returned 0x1 [0163.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0163.286] GetFileType (hFile=0x344) returned 0x1 [0163.286] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x5e8 [0163.286] ReadFile (in: hFile=0x344, lpBuffer=0x288a448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x288a448*, lpNumberOfBytesRead=0x12db38*=0x5e8, lpOverlapped=0x0) returned 1 [0163.287] CloseHandle (hObject=0x344) returned 1 [0163.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0163.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0163.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0163.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a2f0) returned 1 [0163.351] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0163.351] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.352] GetFileType (hFile=0x344) returned 0x1 [0163.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0163.352] GetFileType (hFile=0x344) returned 0x1 [0163.354] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0163.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.355] GetFileType (hFile=0x344) returned 0x1 [0163.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.355] GetFileType (hFile=0x344) returned 0x1 [0163.356] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0163.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.357] GetFileType (hFile=0x344) returned 0x1 [0163.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.357] GetFileType (hFile=0x344) returned 0x1 [0163.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0163.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\device stage\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.358] GetFileType (hFile=0x344) returned 0x1 [0163.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.359] GetFileType (hFile=0x344) returned 0x1 [0163.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0163.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x28 [0163.360] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.360] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdff6ad0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdffe000, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.361] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.361] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.361] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0163.361] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x28 [0163.361] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdff6ad0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdff6ad0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdffe000, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.362] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdff6ad0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfdff6ad0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfdffe000, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.362] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.362] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0163.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.363] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.363] GetFileType (hFile=0x344) returned 0x1 [0163.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.363] GetFileType (hFile=0x344) returned 0x1 [0163.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0163.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x21 [0163.365] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.365] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.365] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0163.365] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe02ed40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe033b60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.366] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.366] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0163.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x21 [0163.366] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe02ed40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0163.367] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe02ed40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe033b60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.368] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe02ed40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe02ed40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe033b60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.368] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.368] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0163.368] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x28 [0163.369] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe018db0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0202e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.369] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.370] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0163.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x28 [0163.370] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe018db0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe018db0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0202e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.371] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe018db0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe018db0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0202e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.371] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.372] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0163.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.372] GetFileType (hFile=0x344) returned 0x1 [0163.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.372] GetFileType (hFile=0x344) returned 0x1 [0163.374] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0163.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\drm\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.374] GetFileType (hFile=0x344) returned 0x1 [0163.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.374] GetFileType (hFile=0x344) returned 0x1 [0163.384] WriteFile (in: hFile=0x344, lpBuffer=0x26e9a60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26e9a60*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.386] CloseHandle (hObject=0x344) returned 1 [0163.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.386] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0163.386] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x23 [0163.386] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.387] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.387] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0163.387] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe04e910, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe053730, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.388] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.388] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0163.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x23 [0163.389] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04e910, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.389] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0163.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe04e910, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe053730, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.390] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe04e910, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe04e910, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe053730, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.391] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0163.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x28 [0163.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.392] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe044cd0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04c200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.393] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.394] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.394] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0163.394] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x28 [0163.395] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.395] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe044cd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.395] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe044cd0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04c200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.396] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe044cd0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe044cd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe04c200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.396] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0163.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.397] GetFileType (hFile=0x344) returned 0x1 [0163.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.397] GetFileType (hFile=0x344) returned 0x1 [0163.398] WriteFile (in: hFile=0x344, lpBuffer=0x26f0cd8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26f0cd8*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.399] CloseHandle (hObject=0x344) returned 1 [0163.400] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x30 [0163.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.400] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\ehome\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.400] GetFileType (hFile=0x344) returned 0x1 [0163.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.400] GetFileType (hFile=0x344) returned 0x1 [0163.401] WriteFile (in: hFile=0x344, lpBuffer=0x26f3f50*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26f3f50*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.403] CloseHandle (hObject=0x344) returned 1 [0163.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.403] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0163.403] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x2a [0163.404] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.404] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0c1500, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c6320, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.405] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0163.405] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0163.405] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0163.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x2a [0163.405] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c1500, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0c1500, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0c1500, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0c6320, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0163.406] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.407] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.407] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0163.407] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x30 [0163.407] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0163.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0b78c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0b78c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0bedf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.408] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.408] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0163.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x30 [0163.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.409] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe0b9fd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0b9fd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0163.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0b78c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0b78c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0bedf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.410] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0b78c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0b78c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0bedf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.411] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.411] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0163.411] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x49 [0163.411] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.411] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.412] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe097cf0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe09f220, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.412] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.412] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0163.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x49 [0163.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.413] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe097cf0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe097cf0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe09f220, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.414] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe097cf0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe097cf0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe09f220, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.414] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.414] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x56 [0163.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.415] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.415] GetFileType (hFile=0x344) returned 0x1 [0163.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.415] GetFileType (hFile=0x344) returned 0x1 [0163.416] WriteFile (in: hFile=0x344, lpBuffer=0x26fe0c8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26fe0c8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.417] CloseHandle (hObject=0x344) returned 1 [0163.417] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0163.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.417] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.418] GetFileType (hFile=0x344) returned 0x1 [0163.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.418] GetFileType (hFile=0x344) returned 0x1 [0163.418] WriteFile (in: hFile=0x344, lpBuffer=0x2701370*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2701370*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.420] CloseHandle (hObject=0x344) returned 1 [0163.420] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0163.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.420] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.420] GetFileType (hFile=0x344) returned 0x1 [0163.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.421] GetFileType (hFile=0x344) returned 0x1 [0163.422] WriteFile (in: hFile=0x344, lpBuffer=0x27045f8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27045f8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.423] CloseHandle (hObject=0x344) returned 1 [0163.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0163.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x29 [0163.424] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0163.424] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0163.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe0d4d80, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0dc2b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.425] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.425] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.425] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0163.425] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x29 [0163.425] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0d4d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0163.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0163.426] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe0d4d80, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0dc2b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.427] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe0d4d80, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0d4d80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0dc2b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.427] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.427] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0163.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.428] GetFileType (hFile=0x344) returned 0x1 [0163.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.428] GetFileType (hFile=0x344) returned 0x1 [0163.428] WriteFile (in: hFile=0x344, lpBuffer=0x2709ef8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2709ef8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.430] CloseHandle (hObject=0x344) returned 1 [0163.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.430] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0163.430] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x2a [0163.430] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.430] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.431] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0e37e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e8600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.431] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.431] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.432] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0163.432] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x2a [0163.432] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.432] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e37e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.432] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0e37e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e8600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.433] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0e37e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0e37e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0e8600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.433] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.433] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0163.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.433] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\media player\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.434] WriteFile (in: hFile=0x344, lpBuffer=0x270f0d8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x270f0d8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.436] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0163.436] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x20 [0163.436] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0163.437] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0163.438] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0f7060, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0fbe80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.438] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.438] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.438] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0163.438] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x20 [0163.438] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0f7060, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0163.439] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0163.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0f7060, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0fbe80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.440] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe0f7060, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe0f7060, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe0fbe80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.440] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.441] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0163.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.441] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\mf\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.442] WriteFile (in: hFile=0x344, lpBuffer=0x2714658*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2714658*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.443] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x21 [0163.444] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x22 [0163.444] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.444] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0163.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe114520, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe119340, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.445] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.445] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x21 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x22 [0163.445] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0163.446] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe114520, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe119340, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.447] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe114520, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe114520, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe119340, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.447] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.447] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x25 [0163.447] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x26 [0163.447] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe10f700, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.448] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.448] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.449] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x25 [0163.449] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x26 [0163.449] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1560 [0163.449] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe10f700, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.449] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe10f700, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.450] FindNextFileW (in: hFindFile=0xfd1560, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe10f700, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe10f700, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe114520, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.450] FindClose (in: hFindFile=0xfd1560 | out: hFindFile=0xfd1560) returned 1 [0163.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.450] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0163.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.450] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.452] WriteFile (in: hFile=0x344, lpBuffer=0x271b770*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x271b770*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.453] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0163.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.453] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\msdn\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.461] WriteFile (in: hFile=0x344, lpBuffer=0x271e9d8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x271e9d8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0163.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x2a [0163.463] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.464] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.464] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0163.465] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe145260, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe147970, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.465] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.465] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.467] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0163.467] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x2a [0163.467] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.468] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe145260, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.469] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0163.469] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe145260, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe147970, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.469] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe145260, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe145260, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe147970, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.469] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.470] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0163.470] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x3a [0163.470] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.470] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.470] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe138f10, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe13b620, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.471] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.471] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.471] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0163.471] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x3a [0163.471] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.472] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe138f10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.472] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe138f10, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe13b620, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.472] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe138f10, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe138f10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe13b620, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.472] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.473] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x47 [0163.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.473] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.474] WriteFile (in: hFile=0x344, lpBuffer=0x2726300*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2726300*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.476] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0163.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.476] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\netframework\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.477] WriteFile (in: hFile=0x344, lpBuffer=0x2729588*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2729588*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.478] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0163.478] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x25 [0163.478] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.479] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.479] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0163.479] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0163.480] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe16ea70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe171180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.480] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.480] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.480] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0163.480] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x25 [0163.481] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.481] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16ea70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.481] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0163.481] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0163.482] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe16ea70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe171180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.482] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe16ea70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe16ea70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe171180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.482] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0163.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x31 [0163.483] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.483] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.483] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe15b1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe162720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.483] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.483] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.484] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0163.484] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x31 [0163.484] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.484] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe15b1f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.484] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe15b1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe162720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.485] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe15b1f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe15b1f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe162720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.485] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.485] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3e [0163.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.485] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.486] WriteFile (in: hFile=0x344, lpBuffer=0x2730e78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2730e78*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.488] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0163.488] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x30 [0163.488] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.488] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.488] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0163.489] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0163.489] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe169c50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16c360, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.489] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.489] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.489] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0163.489] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x30 [0163.489] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.490] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe169c50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.490] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0163.490] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0163.490] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe169c50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16c360, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.491] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe169c50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe169c50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe16c360, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.491] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.491] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0163.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.492] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.494] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0163.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.494] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\network\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.496] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x23 [0163.496] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x24 [0163.496] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.496] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2430e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico.SYMMYWARE", cAlternateFileName="ASSETL~1.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2939f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico.SYMMYWARE", cAlternateFileName="DOCUME~1.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe39dbc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x55330, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico.SYMMYWARE", cAlternateFileName="MYSHAR~1.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe421920, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico.SYMMYWARE", cAlternateFileName="MYSITE~1.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4bb610, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico.SYMMYWARE", cAlternateFileName="SHAREP~1.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4fd4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico.SYMMYWARE", cAlternateFileName="SHAREP~2.SYM")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5b9490, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5bbba0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0163.497] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0163.497] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.498] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x23 [0163.498] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x24 [0163.498] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b9490, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2430e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico.SYMMYWARE", cAlternateFileName="ASSETL~1.SYM")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2939f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico.SYMMYWARE", cAlternateFileName="DOCUME~1.SYM")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe39dbc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x55330, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico.SYMMYWARE", cAlternateFileName="MYSHAR~1.SYM")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe421920, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico.SYMMYWARE", cAlternateFileName="MYSITE~1.SYM")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4bb610, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico.SYMMYWARE", cAlternateFileName="SHAREP~1.SYM")) returned 1 [0163.498] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4fd4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x6280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico.SYMMYWARE", cAlternateFileName="SHAREP~2.SYM")) returned 1 [0163.499] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5b9490, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5b9490, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5bbba0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.499] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0163.499] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.499] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.499] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2e [0163.499] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2f [0163.499] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.500] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.500] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0163.500] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0163.500] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5b4670, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b6d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.500] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.500] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.500] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2e [0163.500] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2f [0163.500] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.501] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.501] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0163.501] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0163.501] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5b4670, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b6d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.501] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5b4670, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5b4670, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b6d80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.501] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.501] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x33 [0163.502] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x34 [0163.502] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0163.502] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0163.503] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5700b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5775e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0163.504] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.504] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x33 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x34 [0163.505] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.505] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5700b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.505] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0163.505] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0163.505] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0163.505] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0163.506] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5700b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5700b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5775e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0163.507] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0163.508] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0163.508] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.508] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0163.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.508] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.510] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x33 [0163.510] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x34 [0163.510] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.510] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0163.511] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0163.512] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe5af850, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5b4670, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0163.513] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.513] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.514] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x33 [0163.514] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x34 [0163.514] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe5af850, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5af850, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0163.514] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0163.515] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0163.515] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.516] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x41 [0163.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.518] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0163.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.519] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0163.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0163.521] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3e [0163.521] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5d1b30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5d1b30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.521] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0163.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3e [0163.522] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5d1b30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5d1b30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.522] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0163.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x44 [0163.522] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5ccd10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5ccd10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.523] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.523] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0163.523] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x44 [0163.523] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfe5ccd10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5ccd10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.524] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.524] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0163.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.525] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0163.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.527] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0163.528] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x21 [0163.528] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe635cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe635cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.528] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0163.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x21 [0163.529] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe635cc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe635cc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.529] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0163.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x2a [0163.530] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe5eeff0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5eeff0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.530] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.530] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0163.530] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x2a [0163.530] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe5eeff0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5eeff0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.530] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.531] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x37 [0163.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.532] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0163.532] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2f [0163.532] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe5fda50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5fda50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.533] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.533] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0163.533] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2f [0163.533] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe5fda50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe5fda50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.534] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.534] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0163.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.535] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0163.535] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x2b [0163.535] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe6112d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe6112d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.536] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.536] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0163.536] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x2b [0163.536] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe6112d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe6112d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.536] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.537] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0163.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.538] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0163.538] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x26 [0163.539] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe61fd30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe61fd30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.539] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.539] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0163.539] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x26 [0163.539] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe61fd30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe61fd30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.539] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.540] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0163.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.541] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0163.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.543] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0163.543] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x24 [0163.543] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe695030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe695030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.543] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0163.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x24 [0163.544] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe695030, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe695030, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.544] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0163.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x29 [0163.545] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe692920, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe692920, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.545] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.545] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0163.545] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x29 [0163.545] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe692920, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe692920, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.545] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0163.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x36 [0163.546] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe653180, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe653180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.546] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0163.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x36 [0163.546] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe653180, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe653180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.546] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.547] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0163.548] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0163.548] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2e [0163.548] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe666a00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe666a00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.548] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.548] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0163.549] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2e [0163.549] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfe666a00, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe666a00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.549] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.549] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3b [0163.550] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0163.552] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0163.553] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0163.553] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x33 [0163.553] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7adc60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7adc60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.554] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.554] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0163.554] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x33 [0163.554] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7adc60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7adc60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.555] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.555] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0163.555] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x44 [0163.555] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe7a6730, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7a6730, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.555] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.555] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0163.556] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x44 [0163.556] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe7a6730, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7a6730, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.556] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.556] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x51 [0163.559] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x40 [0163.561] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0163.561] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x23 [0163.561] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b78a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7b78a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.562] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.562] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0163.562] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x23 [0163.562] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe7b78a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe7b78a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.563] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x30 [0163.564] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x22 [0163.564] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x23 [0163.564] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xfe80a8c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe80a8c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.565] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.565] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x22 [0163.565] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x23 [0163.565] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xfe80a8c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe80a8c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.565] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.566] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x30 [0163.567] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0163.567] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x25 [0163.567] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe83b600, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe83b600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.567] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0163.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x25 [0163.568] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xfe83b600, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe83b600, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.568] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0163.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2e [0163.568] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.569] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0163.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2e [0163.569] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.569] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3b [0163.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12a480) returned 1 [0163.573] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0163.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.573] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.576] GetFileType (hFile=0x344) returned 0x1 [0163.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.576] GetFileType (hFile=0x344) returned 0x1 [0163.577] WriteFile (in: hFile=0x344, lpBuffer=0x27c3f60*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27c3f60*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.578] CloseHandle (hObject=0x344) returned 1 [0163.578] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0163.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.578] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.579] GetFileType (hFile=0x344) returned 0x1 [0163.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.579] GetFileType (hFile=0x344) returned 0x1 [0163.580] WriteFile (in: hFile=0x344, lpBuffer=0x27c71b8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x27c71b8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.581] CloseHandle (hObject=0x344) returned 1 [0163.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.581] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0163.581] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\", lpFilePart=0x0) returned 0x22 [0163.581] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.582] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.590] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0163.591] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0163.591] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0163.591] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0163.591] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0163.591] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0163.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0163.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0163.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0163.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0163.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0163.593] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0163.593] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0163.593] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0163.594] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0163.594] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0163.594] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0163.594] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0163.594] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0163.595] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0163.595] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0163.596] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0163.596] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0163.596] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0163.596] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0163.597] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0163.597] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0163.597] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0163.597] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0163.598] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0163.598] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe89f790, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8a45b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.598] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.598] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.599] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0163.599] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\", lpFilePart=0x0) returned 0x22 [0163.599] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.599] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe89f790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.600] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0163.600] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0163.601] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0163.601] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0163.602] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0163.602] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0163.603] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0163.603] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0163.603] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0163.603] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0163.604] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0163.604] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0163.604] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0163.604] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0163.605] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0163.605] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0163.605] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0163.605] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0163.605] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0163.606] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0163.606] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0163.606] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0163.606] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0163.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0163.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0163.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0163.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0163.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0163.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0163.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0163.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe89f790, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8a45b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe89f790, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe89f790, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8a45b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.609] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.609] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0163.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.609] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\microsoft help\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.614] GetFileType (hFile=0x344) returned 0x1 [0163.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.617] GetFileType (hFile=0x344) returned 0x1 [0163.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.619] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla", lpFilePart=0x0) returned 0x1a [0163.619] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\", lpFilePart=0x0) returned 0x1b [0163.619] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0163.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8bcc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8c1a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.620] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.621] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.621] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla", lpFilePart=0x0) returned 0x1a [0163.621] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\", lpFilePart=0x0) returned 0x1b [0163.621] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.621] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.622] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0163.622] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8bcc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8c1a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.622] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8bcc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8bcc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8c1a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.622] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.623] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs", lpFilePart=0x0) returned 0x1f [0163.623] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x20 [0163.623] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.623] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.623] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0163.624] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8b7e30, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.624] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.624] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.624] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs", lpFilePart=0x0) returned 0x1f [0163.624] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x20 [0163.624] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8b7e30, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0163.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8b7e30, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.625] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8b7e30, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8b7e30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8bcc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.626] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.626] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0163.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.626] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\mozilla\\logs\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.626] GetFileType (hFile=0x344) returned 0x1 [0163.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.627] GetFileType (hFile=0x344) returned 0x1 [0163.628] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0163.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.628] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\mozilla\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.628] GetFileType (hFile=0x344) returned 0x1 [0163.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.628] GetFileType (hFile=0x344) returned 0x1 [0163.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.630] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0163.630] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\", lpFilePart=0x0) returned 0x1a [0163.630] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.630] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.631] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8cddc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8d04d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.631] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.631] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.631] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0163.631] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\", lpFilePart=0x0) returned 0x1a [0163.631] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.632] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8cddc0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.632] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8cddc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8d04d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.632] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8cddc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe8cddc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe8d04d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.632] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.633] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0163.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.633] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\oracle\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.633] GetFileType (hFile=0x344) returned 0x1 [0163.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.633] GetFileType (hFile=0x344) returned 0x1 [0163.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.635] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0163.635] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\", lpFilePart=0x0) returned 0x21 [0163.635] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.635] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.635] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0163.636] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0163.636] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfeb32a70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb35180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.636] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0163.636] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0163.636] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0163.637] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9cbc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9cbc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0163.637] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9edf20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9edf20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0163.637] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea10200, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea10200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0163.637] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea324e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea324e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0163.637] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea595e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea595e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0163.638] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea71c80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea71c80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0163.638] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8f140, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8f140, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0163.638] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa77e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa77e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0163.638] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeab6240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeab6240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0163.638] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeace8e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeace8e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0163.639] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0163.639] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0163.639] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0163.639] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0163.639] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0163.640] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0163.640] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.640] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0163.640] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\", lpFilePart=0x0) returned 0x21 [0163.640] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.641] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.641] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfeb32a70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb32a70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb35180, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9cbc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9cbc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0163.642] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9edf20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9edf20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea10200, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea10200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea324e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea324e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea595e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea595e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea71c80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea71c80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8f140, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8f140, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa77e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa77e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0163.643] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeab6240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeab6240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0163.644] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeace8e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeace8e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0163.644] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0163.644] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0163.644] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0163.644] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0163.645] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0163.645] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.645] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0163.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0163.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.645] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0163.645] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x4a [0163.646] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe92d130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe931f50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.647] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.647] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0163.647] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x4a [0163.647] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.648] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.648] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.648] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe92d130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe931f50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.648] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe92d130, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe92d130, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe931f50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.648] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.648] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0163.649] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x53 [0163.649] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.649] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.649] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0163.650] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe928310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.650] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.650] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.650] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0163.650] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x53 [0163.650] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.651] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.651] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0163.651] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe928310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.651] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe928310, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe928310, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe92d130, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.651] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.651] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0163.651] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0163.652] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.652] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.652] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9234f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.652] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0163.652] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0163.652] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.653] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0163.653] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0163.653] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.653] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.653] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9234f0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9234f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe928310, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.653] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0163.653] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.653] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.654] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0163.654] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0163.654] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.654] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.654] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9171a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.654] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0163.655] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.655] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.655] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0163.655] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0163.655] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.655] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9171a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.655] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9171a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9171a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9234f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.656] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0163.656] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0163.656] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.656] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0163.656] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0163.658] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0163.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.660] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.660] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.662] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0163.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.662] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.664] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0163.664] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x4a [0163.664] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.664] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.664] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.665] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe960580, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe962c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.665] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.665] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.665] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0163.665] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x4a [0163.666] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe960580, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe960580, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe962c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.666] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe960580, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe960580, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe962c90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.666] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.667] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0163.667] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x53 [0163.667] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.667] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.667] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0163.667] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe95b760, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95de70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.668] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.668] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.668] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0163.668] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x53 [0163.668] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0163.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe95b760, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95de70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.669] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe95b760, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe95b760, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95de70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.669] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.669] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0163.670] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0163.670] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe956940, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0163.670] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0163.670] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0163.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0163.671] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.671] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.671] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe956940, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe956940, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe95b760, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.672] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0163.672] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.672] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.672] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0163.672] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0163.672] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.673] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.673] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe951b20, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.673] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0163.673] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.673] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0163.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0163.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0163.673] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.674] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe951b20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.674] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe951b20, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe951b20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe956940, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.674] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0163.674] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0163.674] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0163.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0163.675] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0163.675] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0163.677] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x66 [0163.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.677] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.679] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.679] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0163.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.681] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.683] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.683] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.683] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.683] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.684] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.684] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe984f70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe987680, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.684] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.684] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.684] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.684] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.685] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.685] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe984f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.685] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.685] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe984f70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe987680, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.685] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe984f70, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe984f70, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe987680, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.685] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.686] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.686] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.686] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe980150, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe982860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0163.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0163.686] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.687] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.687] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.687] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.687] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe980150, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.687] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe980150, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe980150, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe982860, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.688] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0163.688] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.688] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.688] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0163.688] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0163.688] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe976510, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe976510, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97da40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.689] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.690] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0163.690] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0163.690] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.690] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe97b330, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97b330, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.690] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.690] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe976510, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe976510, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe97da40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.690] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.691] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0163.691] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.691] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7e [0163.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.691] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.693] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.693] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.695] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.695] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.697] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0163.697] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x48 [0163.697] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.698] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.698] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.698] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe98ebb0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe98ebb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9960e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.698] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0163.698] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.698] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.699] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0163.699] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x48 [0163.699] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.699] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9912c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9912c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.699] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.699] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe98ebb0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe98ebb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9960e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.699] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0163.699] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0163.700] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0163.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.700] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.702] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.702] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.702] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.702] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.702] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.702] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9b83c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9bd1e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.702] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.703] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.703] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.703] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.703] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.703] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.703] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.703] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9b83c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9bd1e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.704] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9b83c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9b83c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9bd1e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.704] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.704] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.704] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.704] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.704] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.704] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9b35a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.705] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9ae780, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9ae780, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0163.705] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9ae780, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9ae780, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0163.705] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.705] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.705] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.705] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.705] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b35a0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.706] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe9b35a0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfe9b35a0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9b83c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.706] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9ae780, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9ae780, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0163.706] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.706] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0163.706] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0163.706] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9ae780, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9ae780, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.707] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.707] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0163.707] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0163.708] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfe9ae780, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9ae780, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.708] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.709] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x83 [0163.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.710] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.712] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.713] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0163.713] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x48 [0163.713] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9cbc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9cbc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.714] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.714] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0163.714] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x48 [0163.714] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfe9cbc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9cbc40, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.714] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.715] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0163.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.716] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.716] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.716] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9edf20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9edf20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.717] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.717] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.717] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.717] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9edf20, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9edf20, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.717] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.718] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.718] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.718] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9eb810, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9eb810, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.718] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.718] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.719] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9eb810, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9eb810, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.719] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0163.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x72 [0163.719] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9e69f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9e69f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.720] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0163.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x72 [0163.720] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfe9e69f0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfe9e69f0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.720] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.721] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7f [0163.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.722] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.724] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0163.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.725] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.725] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.725] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea10200, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea10200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.726] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.726] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.726] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.726] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea10200, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea10200, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.726] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.727] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.727] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.727] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea0b3e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea0b3e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.727] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.728] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.728] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.728] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea0b3e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea0b3e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.728] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.729] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0163.729] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x75 [0163.729] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea065c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea065c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.729] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0163.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x75 [0163.730] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfea065c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea065c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.730] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x82 [0163.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.732] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.733] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0163.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.735] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea324e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea324e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.736] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.736] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.736] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.736] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea324e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea324e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.736] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.737] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.737] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.737] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea2fdd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea2fdd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.737] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.738] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea2fdd0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea2fdd0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.738] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0163.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x74 [0163.739] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea2afb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea2afb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.739] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x74 [0163.740] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfea2afb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea2afb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.740] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x81 [0163.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.743] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.744] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0163.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.746] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea595e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea595e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.746] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.747] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.747] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.747] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea595e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea595e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.747] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.748] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea547c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea547c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.748] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.748] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea547c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea547c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.749] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0163.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0163.749] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea520b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea520b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.749] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0163.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0163.749] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea520b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea520b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.750] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.750] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x83 [0163.751] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.753] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.754] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.754] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.754] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea71c80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea71c80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.755] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.755] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0163.755] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0163.755] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea71c80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea71c80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.755] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.756] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.756] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.756] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea6ce60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea6ce60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.756] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0163.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0163.757] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea6ce60, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea6ce60, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.757] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0163.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0163.757] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea6a750, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea6a750, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.758] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0163.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0163.758] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfea6a750, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea6a750, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.758] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.759] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x80 [0163.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8f140, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8f140, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.764] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.765] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8f140, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8f140, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.765] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.765] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8a320, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8a320, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.765] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.766] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea8a320, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea8a320, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.766] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0163.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0163.767] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea87c10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea87c10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.767] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0163.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0163.770] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfea87c10, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfea87c10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.770] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.770] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x81 [0163.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.773] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.775] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa77e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa77e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.775] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.775] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.775] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.775] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa77e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa77e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.775] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.776] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa50d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa50d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.776] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.776] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa50d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa50d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.776] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0163.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa29c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa29c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.777] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0163.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeaa29c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaa29c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.777] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.778] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x7e [0163.780] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.781] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0163.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x48 [0163.783] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeab6240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeab6240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.783] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0163.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x48 [0163.783] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeab6240, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeab6240, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.784] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x55 [0163.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.785] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeace8e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeace8e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.786] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0163.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0163.786] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeace8e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeace8e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.786] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.787] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeac9ac0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeac9ac0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.787] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0163.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0163.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeac9ac0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeac9ac0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.830] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0163.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0163.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeac73b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeac73b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.831] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0163.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0163.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfeac73b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeac73b0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.831] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x80 [0163.841] WriteFile (in: hFile=0x344, lpBuffer=0x26ea928*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26ea928*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.842] CloseHandle (hObject=0x344) returned 1 [0163.843] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x69 [0163.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.844] GetFileType (hFile=0x344) returned 0x1 [0163.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.844] GetFileType (hFile=0x344) returned 0x1 [0163.845] WriteFile (in: hFile=0x344, lpBuffer=0x26edc80*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x26edc80*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.846] CloseHandle (hObject=0x344) returned 1 [0163.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0163.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.846] GetFileType (hFile=0x344) returned 0x1 [0163.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.847] GetFileType (hFile=0x344) returned 0x1 [0163.847] WriteFile (in: hFile=0x344, lpBuffer=0x26f0fb8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x26f0fb8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.848] CloseHandle (hObject=0x344) returned 1 [0163.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.849] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.849] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae9690, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaebda0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.850] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0163.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0163.851] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.852] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.852] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.852] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae9690, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaebda0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.852] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae9690, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeae9690, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeaebda0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.853] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.853] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.853] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae6f80, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0163.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0163.854] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.855] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0163.855] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0163.855] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.906] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae6f80, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeae6f80, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeae6f80, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae9690, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0163.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.908] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0163.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x77 [0163.909] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.909] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.910] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.910] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeadd340, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeadd340, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae4870, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.910] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.911] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.911] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.912] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0163.912] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x77 [0163.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.912] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeae2160, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae2160, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.913] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.913] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeadd340, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeadd340, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeae4870, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.914] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.914] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0163.915] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.915] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x84 [0163.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.916] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.916] GetFileType (hFile=0x344) returned 0x1 [0163.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.916] GetFileType (hFile=0x344) returned 0x1 [0163.917] WriteFile (in: hFile=0x344, lpBuffer=0x26fe158*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x26fe158*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.919] CloseHandle (hObject=0x344) returned 1 [0163.919] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6a [0163.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.919] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.920] GetFileType (hFile=0x344) returned 0x1 [0163.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.920] GetFileType (hFile=0x344) returned 0x1 [0163.921] WriteFile (in: hFile=0x344, lpBuffer=0x27014b0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27014b0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.922] CloseHandle (hObject=0x344) returned 1 [0163.922] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0163.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.923] GetFileType (hFile=0x344) returned 0x1 [0163.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.923] GetFileType (hFile=0x344) returned 0x1 [0163.924] WriteFile (in: hFile=0x344, lpBuffer=0x27047e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x27047e8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.925] CloseHandle (hObject=0x344) returned 1 [0163.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0163.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpFilePart=0x0) returned 0x48 [0163.926] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeaf0bc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeaf0bc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafcf10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0163.928] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.928] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0163.929] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xfeafa800, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafa800, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.931] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeaf0bc0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeaf0bc0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeafcf10, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0163.932] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0163.932] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.933] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.933] GetFileType (hFile=0x344) returned 0x1 [0163.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.934] GetFileType (hFile=0x344) returned 0x1 [0163.934] WriteFile (in: hFile=0x344, lpBuffer=0x270aac0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x270aac0*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.946] CloseHandle (hObject=0x344) returned 1 [0163.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.947] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.948] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.948] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.948] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb01d30, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb01d30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb10790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.948] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0163.949] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.949] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.950] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb06b50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb06b50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.951] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.951] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb01d30, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb01d30, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb10790, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.952] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0163.952] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0163.952] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.953] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.953] GetFileType (hFile=0x344) returned 0x1 [0163.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.953] GetFileType (hFile=0x344) returned 0x1 [0163.954] WriteFile (in: hFile=0x344, lpBuffer=0x2710d98*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2710d98*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.955] CloseHandle (hObject=0x344) returned 1 [0163.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.956] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.956] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.957] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.957] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb155b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb155b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1cae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.958] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0163.958] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.958] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.959] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.959] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xfeb1a3d0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1a3d0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.959] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0163.960] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb155b0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb155b0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb1cae0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.960] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0163.961] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0163.961] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.962] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.962] GetFileType (hFile=0x344) returned 0x1 [0163.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.963] GetFileType (hFile=0x344) returned 0x1 [0163.964] WriteFile (in: hFile=0x344, lpBuffer=0x2717070*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x2717070*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.966] CloseHandle (hObject=0x344) returned 1 [0163.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.966] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.967] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.967] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.967] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb2dc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.968] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.968] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0163.969] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.970] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.970] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0163.971] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb2dc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.971] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb2dc50, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb2dc50, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb32a70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0163.971] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0163.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0163.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.973] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.973] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb2b540, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.973] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0163.974] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0163.974] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0163.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.975] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.975] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb2b540, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb2b540, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2dc50, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.976] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0163.976] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.976] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0163.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0163.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb24010, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb24010, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.979] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0163.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0163.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xfeb26720, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb26720, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0163.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb24010, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfeb24010, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfeb2b540, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0163.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0163.980] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0163.980] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0163.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0163.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0163.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0163.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.981] GetFileType (hFile=0x344) returned 0x1 [0163.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0163.981] GetFileType (hFile=0x344) returned 0x1 [0163.982] WriteFile (in: hFile=0x344, lpBuffer=0x2724098*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2724098*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.983] CloseHandle (hObject=0x344) returned 1 [0163.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0163.984] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.984] GetFileType (hFile=0x344) returned 0x1 [0163.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0163.984] GetFileType (hFile=0x344) returned 0x1 [0163.985] WriteFile (in: hFile=0x344, lpBuffer=0x27273f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x27273f0*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.986] CloseHandle (hObject=0x344) returned 1 [0163.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0163.987] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.987] GetFileType (hFile=0x344) returned 0x1 [0163.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0163.987] GetFileType (hFile=0x344) returned 0x1 [0163.988] WriteFile (in: hFile=0x344, lpBuffer=0x272a728*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x272a728*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0163.989] CloseHandle (hObject=0x344) returned 1 [0163.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.989] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\package cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.989] GetFileType (hFile=0x344) returned 0x1 [0163.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.989] GetFileType (hFile=0x344) returned 0x1 [0163.990] WriteFile (in: hFile=0x344, lpBuffer=0x272d990*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x272d990*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.991] CloseHandle (hObject=0x344) returned 1 [0163.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0163.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0163.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2b [0163.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0163.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\start menu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0163.997] GetFileType (hFile=0x344) returned 0x1 [0163.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0163.997] GetFileType (hFile=0x344) returned 0x1 [0163.998] WriteFile (in: hFile=0x344, lpBuffer=0x2731e58*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2731e58*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0163.999] CloseHandle (hObject=0x344) returned 1 [0163.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0163.999] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun", lpFilePart=0x0) returned 0x16 [0164.000] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\", lpFilePart=0x0) returned 0x17 [0164.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0164.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfec070e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec0bf00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.000] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.001] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.001] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun", lpFilePart=0x0) returned 0x16 [0164.001] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\", lpFilePart=0x0) returned 0x17 [0164.001] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.001] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0164.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfec070e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec0bf00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.002] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfec070e0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfec070e0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec0bf00, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0164.002] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.002] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java", lpFilePart=0x0) returned 0x1b [0164.003] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\", lpFilePart=0x0) returned 0x1c [0164.003] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.003] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.003] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0164.003] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebffbb0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.004] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.004] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.004] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java", lpFilePart=0x0) returned 0x1b [0164.004] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\", lpFilePart=0x0) returned 0x1c [0164.004] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.004] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.004] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0164.005] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebffbb0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.005] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebffbb0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebffbb0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfec070e0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0164.005] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.005] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x27 [0164.005] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x28 [0164.006] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.006] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.006] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfebf5f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml.SYMMYWARE", cAlternateFileName="JAUREG~1.SYM")) returned 1 [0164.006] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebfad90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.006] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.006] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.007] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x27 [0164.007] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x28 [0164.007] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.007] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebfad90, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.007] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfebf5f70, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml.SYMMYWARE", cAlternateFileName="JAUREG~1.SYM")) returned 1 [0164.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebfad90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0164.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfebfad90, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfebfad90, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfebffbb0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0164.008] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.008] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0164.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.008] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\sun\\java\\java update\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.009] GetFileType (hFile=0x344) returned 0x1 [0164.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.009] GetFileType (hFile=0x344) returned 0x1 [0164.010] WriteFile (in: hFile=0x344, lpBuffer=0x273b190*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x273b190*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.014] CloseHandle (hObject=0x344) returned 1 [0164.014] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x29 [0164.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\sun\\java\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.015] GetFileType (hFile=0x344) returned 0x1 [0164.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.015] GetFileType (hFile=0x344) returned 0x1 [0164.015] WriteFile (in: hFile=0x344, lpBuffer=0x273e3e8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dc68, lpOverlapped=0x0 | out: lpBuffer=0x273e3e8*, lpNumberOfBytesWritten=0x12dc68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.018] CloseHandle (hObject=0x344) returned 1 [0164.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0164.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\sun\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.019] GetFileType (hFile=0x344) returned 0x1 [0164.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.019] GetFileType (hFile=0x344) returned 0x1 [0164.020] WriteFile (in: hFile=0x344, lpBuffer=0x2741630*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2741630*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.021] CloseHandle (hObject=0x344) returned 1 [0164.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.022] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0164.022] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates\\", lpFilePart=0x0) returned 0x1d [0164.022] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0164.025] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0164.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.026] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\templates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.026] GetFileType (hFile=0x344) returned 0x1 [0164.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.026] GetFileType (hFile=0x344) returned 0x1 [0164.027] WriteFile (in: hFile=0x344, lpBuffer=0x2745af8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dce8, lpOverlapped=0x0 | out: lpBuffer=0x2745af8*, lpNumberOfBytesWritten=0x12dce8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.028] CloseHandle (hObject=0x344) returned 1 [0164.028] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x20 [0164.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0164.029] CreateFileW (lpFileName="C:\\Users\\All Users\\SYMMYWARE.TXT" (normalized: "c:\\users\\all users\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.030] GetFileType (hFile=0x344) returned 0x1 [0164.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0164.030] GetFileType (hFile=0x344) returned 0x1 [0164.031] WriteFile (in: hFile=0x344, lpBuffer=0x2748d30*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dd68, lpOverlapped=0x0 | out: lpBuffer=0x2748d30*, lpNumberOfBytesWritten=0x12dd68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.032] CloseHandle (hObject=0x344) returned 1 [0164.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0164.032] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0164.032] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\", lpFilePart=0x0) returned 0x11 [0164.032] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.033] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.033] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0164.033] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0164.034] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0164.034] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0164.034] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0164.035] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0164.035] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0164.036] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0164.036] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0164.036] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0164.037] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0164.037] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0164.037] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0164.038] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0164.038] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0164.039] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0164.039] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0164.039] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0164.039] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0164.040] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0164.040] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0164.040] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0164.040] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0164.041] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0164.041] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0164.041] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0164.041] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0164.042] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0164.042] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0164.042] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0164.043] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0164.043] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0164.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0164.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0164.043] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0164.043] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\", lpFilePart=0x0) returned 0x11 [0164.044] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.044] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.044] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0164.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0164.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0164.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0164.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0164.045] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0164.046] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0164.046] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0164.046] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0164.046] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0164.046] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0164.047] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0164.047] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0164.047] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0164.048] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0164.048] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0164.048] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0164.048] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0164.048] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0164.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0164.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0164.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0164.049] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0164.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0164.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0164.050] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0164.052] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0164.052] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0164.052] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0164.052] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0164.053] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.053] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0164.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0164.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.053] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0164.053] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\", lpFilePart=0x0) returned 0x19 [0164.053] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.054] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.054] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0164.055] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0164.055] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0164.055] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0164.055] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.056] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0164.056] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\", lpFilePart=0x0) returned 0x19 [0164.056] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.056] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.057] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0164.057] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0164.057] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0164.057] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.058] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0164.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\", lpFilePart=0x0) returned 0x1f [0164.058] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.060] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.060] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0164.060] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0164.060] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0164.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0164.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0164.061] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0164.061] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.062] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0164.063] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\", lpFilePart=0x0) returned 0x1f [0164.063] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.064] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.064] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0164.064] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0164.065] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0164.065] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.065] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0164.065] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0164.065] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.066] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.067] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2f [0164.067] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x30 [0164.067] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0164.074] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3d [0164.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.074] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.078] GetFileType (hFile=0x344) returned 0x1 [0164.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.078] GetFileType (hFile=0x344) returned 0x1 [0164.079] WriteFile (in: hFile=0x344, lpBuffer=0x2758f78*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x2758f78*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.080] CloseHandle (hObject=0x344) returned 1 [0164.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.080] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History", lpFilePart=0x0) returned 0x26 [0164.080] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x27 [0164.081] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0164.085] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0164.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.085] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\history\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.091] GetFileType (hFile=0x344) returned 0x1 [0164.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.091] GetFileType (hFile=0x344) returned 0x1 [0164.092] WriteFile (in: hFile=0x344, lpBuffer=0x275d538*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dbe8, lpOverlapped=0x0 | out: lpBuffer=0x275d538*, lpNumberOfBytesWritten=0x12dbe8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.093] CloseHandle (hObject=0x344) returned 1 [0164.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.093] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0164.094] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x29 [0164.094] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.094] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.095] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0164.095] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0164.095] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0164.096] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0164.096] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0164.096] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0164.097] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0164.097] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0164.097] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0164.098] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0164.098] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.098] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0164.098] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x29 [0164.099] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.099] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.099] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0164.099] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0164.100] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0164.100] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0164.100] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0164.101] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0164.101] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0164.101] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0164.101] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0164.102] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.102] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.102] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x34 [0164.102] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x35 [0164.102] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.104] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.104] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.104] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.105] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x34 [0164.105] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x35 [0164.105] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.106] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.106] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0164.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.107] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.107] GetFileType (hFile=0x344) returned 0x1 [0164.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.108] GetFileType (hFile=0x344) returned 0x1 [0164.108] WriteFile (in: hFile=0x344, lpBuffer=0x27660d8*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x27660d8*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.110] CloseHandle (hObject=0x344) returned 1 [0164.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.110] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2e [0164.110] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x2f [0164.110] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.113] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.114] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0164.114] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0164.114] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0164.115] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0164.115] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.116] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2e [0164.116] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x2f [0164.116] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.118] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.118] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0164.119] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0164.119] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0164.119] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.119] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0164.123] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0164.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0164.124] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.125] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x40 [0164.125] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.128] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.155] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.156] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0164.156] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0164.157] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0164.157] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.157] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.159] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0164.160] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0164.160] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0164.161] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.162] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.162] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x40 [0164.163] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.165] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.166] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.167] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0164.167] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0164.167] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0164.167] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0164.168] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0164.169] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4d [0164.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0164.171] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x12d4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0164.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.172] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.174] GetFileType (hFile=0x344) returned 0x1 [0164.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.174] GetFileType (hFile=0x344) returned 0x1 [0164.175] WriteFile (in: hFile=0x344, lpBuffer=0x276f008*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x276f008*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.176] CloseHandle (hObject=0x344) returned 1 [0164.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.176] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0164.177] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0164.177] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0164.179] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.180] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.181] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x57 [0164.181] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.185] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.185] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.185] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0164.186] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0164.186] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.186] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0164.187] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0164.187] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d6d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0164.188] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d6a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.189] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.190] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x57 [0164.190] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.193] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.194] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.194] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0164.195] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.195] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.195] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0164.197] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0164.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0164.198] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.199] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.200] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.201] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.202] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x62 [0164.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.205] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.205] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.205] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0164.206] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.206] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.206] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.207] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0164.208] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0164.208] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d650, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0164.209] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.210] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d620, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.211] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.212] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.213] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x62 [0164.213] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d5f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.216] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.216] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.217] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0164.217] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0164.217] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.218] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0164.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6f [0164.219] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT", lpszLongPath=0x12d4d0, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0164.220] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x12d440, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0164.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.220] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.221] GetFileType (hFile=0x344) returned 0x1 [0164.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.221] GetFileType (hFile=0x344) returned 0x1 [0164.222] WriteFile (in: hFile=0x344, lpBuffer=0x2778138*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12da68, lpOverlapped=0x0 | out: lpBuffer=0x2778138*, lpNumberOfBytesWritten=0x12da68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.223] CloseHandle (hObject=0x344) returned 1 [0164.224] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0164.224] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x64 [0164.225] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT", lpszLongPath=0x12d550, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0164.225] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x12d4c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0164.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.226] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.227] GetFileType (hFile=0x344) returned 0x1 [0164.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.227] GetFileType (hFile=0x344) returned 0x1 [0164.228] WriteFile (in: hFile=0x344, lpBuffer=0x277b480*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x277b480*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.229] CloseHandle (hObject=0x344) returned 1 [0164.229] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3c [0164.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.230] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.230] GetFileType (hFile=0x344) returned 0x1 [0164.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.230] GetFileType (hFile=0x344) returned 0x1 [0164.231] WriteFile (in: hFile=0x344, lpBuffer=0x277e728*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x277e728*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.232] CloseHandle (hObject=0x344) returned 1 [0164.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.232] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0164.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x35 [0164.233] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.235] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.235] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0164.235] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0164.236] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0164.236] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.236] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0164.236] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0164.236] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0164.237] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0164.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x35 [0164.238] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.239] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.240] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0164.240] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0164.240] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0164.240] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.241] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0164.241] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0164.241] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.241] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0164.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x3e [0164.243] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.244] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.245] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.245] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.245] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.246] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.246] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0164.246] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x3e [0164.246] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.247] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.247] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.248] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.248] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0164.248] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.248] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0164.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.249] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.250] WriteFile (in: hFile=0x344, lpBuffer=0x2787430*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2787430*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.251] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0164.252] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x3e [0164.252] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.252] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.252] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.253] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.253] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.253] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.254] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0164.254] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x3e [0164.254] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.254] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.254] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.255] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.255] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0164.255] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.255] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0164.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.256] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.257] WriteFile (in: hFile=0x344, lpBuffer=0x278ce88*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x278ce88*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.258] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0164.258] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x3e [0164.259] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.259] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.259] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.260] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.260] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.260] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.260] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0164.260] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x3e [0164.260] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.261] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.261] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.261] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.262] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0164.262] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.262] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0164.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.262] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.264] WriteFile (in: hFile=0x344, lpBuffer=0x27928e0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x27928e0*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.265] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0164.265] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x3e [0164.265] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.266] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.266] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.266] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.267] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.267] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0164.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x3e [0164.267] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.268] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.268] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.268] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0164.268] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0164.269] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.269] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0164.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.269] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.270] WriteFile (in: hFile=0x344, lpBuffer=0x2798338*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12dae8, lpOverlapped=0x0 | out: lpBuffer=0x2798338*, lpNumberOfBytesWritten=0x12dae8*=0x4aa, lpOverlapped=0x0) returned 1 [0164.272] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x42 [0164.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.272] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.273] WriteFile (in: hFile=0x344, lpBuffer=0x279b5f0*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x279b5f0*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.275] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0164.276] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3b [0164.276] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.276] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.277] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0164.277] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0164.277] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.277] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.277] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0164.278] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3b [0164.278] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.279] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.279] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0164.280] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0164.280] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0 [0164.280] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.281] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0164.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.281] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0164.282] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc88 | out: lpFileSizeHigh=0x12dc88*=0x0) returned 0x2fa9 [0164.283] ReadFile (in: hFile=0x344, lpBuffer=0x279ee58, nNumberOfBytesToRead=0x2fa9, lpNumberOfBytesRead=0x12dbb8, lpOverlapped=0x0 | out: lpBuffer=0x279ee58*, lpNumberOfBytesRead=0x12dbb8*=0x2fa9, lpOverlapped=0x0) returned 1 [0164.355] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0164.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da30) returned 1 [0164.355] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.357] GetFileType (hFile=0x344) returned 0x1 [0164.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9a0) returned 1 [0164.357] GetFileType (hFile=0x344) returned 0x1 [0164.357] WriteFile (in: hFile=0x344, lpBuffer=0x2801370*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x12da78, lpOverlapped=0x0 | out: lpBuffer=0x2801370*, lpNumberOfBytesWritten=0x12da78*=0x36, lpOverlapped=0x0) returned 1 [0164.358] CloseHandle (hObject=0x344) returned 1 [0164.358] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0164.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.358] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.359] GetFileType (hFile=0x344) returned 0x1 [0164.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da60) returned 1 [0164.359] GetFileType (hFile=0x344) returned 0x1 [0164.359] WriteFile (in: hFile=0x344, lpBuffer=0x27fcd48*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x12dc18, lpOverlapped=0x0 | out: lpBuffer=0x27fcd48*, lpNumberOfBytesWritten=0x12dc18*=0x2fb0, lpOverlapped=0x0) returned 1 [0164.361] CloseHandle (hObject=0x344) returned 1 [0164.361] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0164.361] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE", lpFilePart=0x0) returned 0x50 [0164.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x12dcd0 | out: lpFileInformation=0x12dcd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf6b1a80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0164.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.361] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.symmyware")) returned 1 [0164.362] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x48 [0164.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.362] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.365] GetFileType (hFile=0x344) returned 0x1 [0164.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.365] GetFileType (hFile=0x344) returned 0x1 [0164.365] WriteFile (in: hFile=0x344, lpBuffer=0x2804978*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x12db68, lpOverlapped=0x0 | out: lpBuffer=0x2804978*, lpNumberOfBytesWritten=0x12db68*=0x4aa, lpOverlapped=0x0) returned 1 [0164.367] CloseHandle (hObject=0x344) returned 1 [0164.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0164.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x36 [0164.367] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.372] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.373] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0164.373] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0164.373] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0164.374] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0 [0164.374] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0164.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x36 [0164.375] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0164.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0164.378] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0164.378] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.378] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.379] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0164.379] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x45 [0164.379] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.381] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.381] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0164.381] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0164.381] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.382] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0164.382] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x45 [0164.382] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.382] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.382] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0164.383] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.383] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.384] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0164.384] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x4b [0164.384] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.385] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.385] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0164.385] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0164.386] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.386] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0164.386] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x4b [0164.386] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.386] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.387] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0164.387] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.387] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.387] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0164.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x54 [0164.388] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.390] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.390] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0164.390] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0164.391] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0164.391] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0164.391] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0164.392] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0164.392] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0164.392] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0164.393] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0164.393] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0164.393] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0164.394] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0164.394] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.394] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.396] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0164.396] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x54 [0164.396] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.397] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.397] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0164.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0164.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0164.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0164.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0164.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0164.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0164.400] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0164.400] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0164.400] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0164.401] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0164.401] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0164.401] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0164.402] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.403] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x61 [0164.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0164.403] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.405] GetFileType (hFile=0x344) returned 0x1 [0164.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0164.405] GetFileType (hFile=0x344) returned 0x1 [0164.407] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x58 [0164.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.407] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.408] GetFileType (hFile=0x344) returned 0x1 [0164.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.408] GetFileType (hFile=0x344) returned 0x1 [0164.409] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0164.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.409] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.410] GetFileType (hFile=0x344) returned 0x1 [0164.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.410] GetFileType (hFile=0x344) returned 0x1 [0164.412] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0164.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.412] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.412] GetFileType (hFile=0x344) returned 0x1 [0164.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.412] GetFileType (hFile=0x344) returned 0x1 [0164.414] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0164.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.414] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.415] GetFileType (hFile=0x344) returned 0x1 [0164.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.415] GetFileType (hFile=0x344) returned 0x1 [0164.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0164.416] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0164.417] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0164.419] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.419] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.419] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0164.419] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0164.420] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.420] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.420] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0164.421] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0 [0164.421] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.421] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0164.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.422] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.422] GetFileType (hFile=0x344) returned 0x1 [0164.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0164.422] GetFileType (hFile=0x344) returned 0x1 [0164.423] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd08 | out: lpFileSizeHigh=0x12dd08*=0x0) returned 0x0 [0164.423] CloseHandle (hObject=0x344) returned 1 [0164.498] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x12d5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0164.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dab0) returned 1 [0164.498] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.499] GetFileType (hFile=0x344) returned 0x1 [0164.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da20) returned 1 [0164.499] GetFileType (hFile=0x344) returned 0x1 [0164.500] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x12d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0164.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.500] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.501] GetFileType (hFile=0x344) returned 0x1 [0164.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dae0) returned 1 [0164.502] GetFileType (hFile=0x344) returned 0x1 [0164.503] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0164.503] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0164.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x12dd50 | out: lpFileInformation=0x12dd50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf80c560, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0164.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0164.503] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.symmyware")) returned 1 [0164.504] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0164.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.504] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\temp\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.505] GetFileType (hFile=0x344) returned 0x1 [0164.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.505] GetFileType (hFile=0x344) returned 0x1 [0164.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.507] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0164.507] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x38 [0164.507] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc20) returned 1 [0164.511] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x45 [0164.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.512] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.515] GetFileType (hFile=0x344) returned 0x1 [0164.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.516] GetFileType (hFile=0x344) returned 0x1 [0164.517] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2c [0164.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.517] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\local\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.519] GetFileType (hFile=0x344) returned 0x1 [0164.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.519] GetFileType (hFile=0x344) returned 0x1 [0164.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.520] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0164.520] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x22 [0164.520] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.522] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.522] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.522] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0164.522] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0164.523] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x22 [0164.523] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.523] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.523] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.524] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.524] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0164.524] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x2c [0164.524] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.525] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.525] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0164.525] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0164.525] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.526] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0164.526] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x2c [0164.526] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.526] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.527] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0164.527] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.527] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.527] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0164.527] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x3d [0164.528] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.528] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.528] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0164.529] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0164.529] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0164.529] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0164.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x3d [0164.530] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.530] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.530] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0164.530] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0164.530] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.531] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0164.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x45 [0164.531] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.533] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.533] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0164.533] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0164.533] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.534] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0164.534] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x45 [0164.534] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.534] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.535] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0164.535] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0164.535] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0164.535] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.536] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x52 [0164.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.536] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.539] GetFileType (hFile=0x344) returned 0x1 [0164.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.539] GetFileType (hFile=0x344) returned 0x1 [0164.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.540] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0164.540] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x46 [0164.541] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.541] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.541] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0164.542] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0164.542] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.542] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0164.542] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x46 [0164.543] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.543] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.543] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0164.543] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0164.544] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0164.544] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0164.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.544] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.547] GetFileType (hFile=0x344) returned 0x1 [0164.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.547] GetFileType (hFile=0x344) returned 0x1 [0164.549] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0164.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.549] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.549] GetFileType (hFile=0x344) returned 0x1 [0164.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.550] GetFileType (hFile=0x344) returned 0x1 [0164.551] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0164.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.551] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.552] GetFileType (hFile=0x344) returned 0x1 [0164.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.552] GetFileType (hFile=0x344) returned 0x1 [0164.553] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0164.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.553] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\locallow\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.553] GetFileType (hFile=0x344) returned 0x1 [0164.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.554] GetFileType (hFile=0x344) returned 0x1 [0164.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.555] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0164.555] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x21 [0164.555] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0164.556] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.557] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0164.557] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0164.557] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x21 [0164.557] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0164.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0164.558] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.559] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.559] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0164.559] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x2c [0164.559] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.560] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.561] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0164.561] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0164.561] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0164.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x2c [0164.562] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.562] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.562] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0164.562] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.563] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0164.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x53 [0164.563] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.563] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.564] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.564] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0164.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x53 [0164.564] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.565] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.565] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.565] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x60 [0164.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.566] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.566] GetFileType (hFile=0x344) returned 0x1 [0164.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.566] GetFileType (hFile=0x344) returned 0x1 [0164.568] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x39 [0164.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.568] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.568] GetFileType (hFile=0x344) returned 0x1 [0164.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.569] GetFileType (hFile=0x344) returned 0x1 [0164.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.570] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0164.570] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x2b [0164.570] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.575] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.575] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0164.575] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0164.575] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0164.576] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0164.576] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0164.576] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0164.576] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0164.576] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0164.577] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0164.577] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x12d780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x2b [0164.578] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12d990 | out: lpFindFileData=0x12d990*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.579] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.579] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0164.579] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0164.579] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0164.579] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0164.580] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0164.580] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0164.580] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d9e0 | out: lpFindFileData=0x12d9e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.580] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc40) returned 1 [0164.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc00) returned 1 [0164.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.581] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0164.581] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x37 [0164.581] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.583] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.583] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.583] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0164.584] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x37 [0164.584] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.584] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.584] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.585] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x44 [0164.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.585] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.585] GetFileType (hFile=0x344) returned 0x1 [0164.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.586] GetFileType (hFile=0x344) returned 0x1 [0164.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0164.587] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x32 [0164.587] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0164.588] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0164.589] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.589] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0164.590] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x32 [0164.590] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.590] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.590] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0164.590] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.591] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.591] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0164.591] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x36 [0164.591] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.592] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.592] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.592] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0164.592] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x36 [0164.592] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.593] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.593] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.593] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x43 [0164.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.594] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.596] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3f [0164.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.596] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0164.598] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3d [0164.598] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.599] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.599] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0164.599] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0164.600] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.600] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0164.600] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3d [0164.600] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.600] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.601] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0164.601] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.601] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.601] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0164.601] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4a [0164.601] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.606] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0164.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0164.607] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0164.608] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.608] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.609] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0164.609] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4a [0164.609] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.610] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.611] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.611] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0164.611] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0164.611] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0164.611] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0164.611] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.612] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0164.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.613] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0164.614] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x122 [0164.614] ReadFile (in: hFile=0x344, lpBuffer=0x28c34b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x28c34b0*, lpNumberOfBytesRead=0x12db38*=0x122, lpOverlapped=0x0) returned 1 [0164.659] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0164.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0164.659] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.661] GetFileType (hFile=0x344) returned 0x1 [0164.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0164.661] GetFileType (hFile=0x344) returned 0x1 [0164.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0164.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.663] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.664] GetFileType (hFile=0x344) returned 0x1 [0164.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0164.665] GetFileType (hFile=0x344) returned 0x1 [0164.666] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0164.666] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x65 [0164.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf990850, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0164.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.667] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.symmyware")) returned 1 [0164.668] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0164.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.668] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.669] GetFileType (hFile=0x344) returned 0x1 [0164.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0164.669] GetFileType (hFile=0x344) returned 0x1 [0164.669] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dc08 | out: lpFileSizeHigh=0x12dc08*=0x0) returned 0x110 [0164.669] ReadFile (in: hFile=0x344, lpBuffer=0x2716cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12db38, lpOverlapped=0x0 | out: lpBuffer=0x2716cb8*, lpNumberOfBytesRead=0x12db38*=0x110, lpOverlapped=0x0) returned 1 [0164.719] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0164.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9b0) returned 1 [0164.719] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.721] GetFileType (hFile=0x344) returned 0x1 [0164.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d920) returned 1 [0164.721] GetFileType (hFile=0x344) returned 0x1 [0164.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0164.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.722] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.724] GetFileType (hFile=0x344) returned 0x1 [0164.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9e0) returned 1 [0164.724] GetFileType (hFile=0x344) returned 0x1 [0164.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0164.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x67 [0164.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12dc50 | out: lpFileInformation=0x12dc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfa1e1f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0164.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.726] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.symmyware")) returned 1 [0164.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0164.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x56 [0164.727] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.728] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.728] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0164.728] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0164.729] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0164.729] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.730] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0164.730] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x56 [0164.730] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.730] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0164.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0164.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.731] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0164.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x6b [0164.732] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.733] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.733] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.733] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.734] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0164.734] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x6b [0164.734] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.735] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.735] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.735] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.736] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x78 [0164.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0164.736] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.737] GetFileType (hFile=0x344) returned 0x1 [0164.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0164.737] GetFileType (hFile=0x344) returned 0x1 [0164.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.738] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0164.738] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x5e [0164.738] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.741] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.741] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.741] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0164.742] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0164.742] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0164.742] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.742] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12daf0) returned 1 [0164.744] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0164.744] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x12d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x5e [0164.744] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x12d790 | out: lpFindFileData=0x12d790*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.746] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.746] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.746] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0164.747] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0164.747] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0164.747] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d7e0 | out: lpFindFileData=0x12d7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0164.747] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da40) returned 1 [0164.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da00) returned 1 [0164.749] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0164.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.749] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.750] GetFileType (hFile=0x344) returned 0x1 [0164.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.750] GetFileType (hFile=0x344) returned 0x1 [0164.750] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x5a9 [0164.750] ReadFile (in: hFile=0x344, lpBuffer=0x2777c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x2777c20*, lpNumberOfBytesRead=0x12da38*=0x5a9, lpOverlapped=0x0) returned 1 [0164.764] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0164.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0164.764] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.766] GetFileType (hFile=0x344) returned 0x1 [0164.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0164.766] GetFileType (hFile=0x344) returned 0x1 [0164.767] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0164.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.768] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.769] GetFileType (hFile=0x344) returned 0x1 [0164.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.769] GetFileType (hFile=0x344) returned 0x1 [0164.770] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0164.770] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x7d [0164.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfa8bfc0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0164.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.771] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.symmyware")) returned 1 [0164.772] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0164.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.772] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.772] GetFileType (hFile=0x344) returned 0x1 [0164.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.772] GetFileType (hFile=0x344) returned 0x1 [0164.772] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x4cc [0164.772] ReadFile (in: hFile=0x344, lpBuffer=0x27cda20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x27cda20*, lpNumberOfBytesRead=0x12da38*=0x4cc, lpOverlapped=0x0) returned 1 [0164.786] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0164.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0164.786] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.788] GetFileType (hFile=0x344) returned 0x1 [0164.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0164.788] GetFileType (hFile=0x344) returned 0x1 [0164.790] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0164.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.790] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.791] GetFileType (hFile=0x344) returned 0x1 [0164.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.791] GetFileType (hFile=0x344) returned 0x1 [0164.793] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0164.793] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x7c [0164.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfac1b20, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0164.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.794] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.symmyware")) returned 1 [0164.795] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0164.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.795] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.797] GetFileType (hFile=0x344) returned 0x1 [0164.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.797] GetFileType (hFile=0x344) returned 0x1 [0164.797] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12db08 | out: lpFileSizeHigh=0x12db08*=0x0) returned 0x60b [0164.797] ReadFile (in: hFile=0x344, lpBuffer=0x2823510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12da38, lpOverlapped=0x0 | out: lpBuffer=0x2823510*, lpNumberOfBytesRead=0x12da38*=0x60b, lpOverlapped=0x0) returned 1 [0164.812] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0164.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d8b0) returned 1 [0164.812] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.832] GetFileType (hFile=0x344) returned 0x1 [0164.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d820) returned 1 [0164.832] GetFileType (hFile=0x344) returned 0x1 [0164.833] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0164.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d970) returned 1 [0164.833] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0164.835] GetFileType (hFile=0x344) returned 0x1 [0164.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8e0) returned 1 [0164.835] GetFileType (hFile=0x344) returned 0x1 [0164.836] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0164.836] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x80 [0164.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da70) returned 1 [0164.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12db50 | out: lpFileInformation=0x12db50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfb283c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0164.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.836] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.symmyware")) returned 1 [0164.837] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6b [0164.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d940) returned 1 [0164.837] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.838] GetFileType (hFile=0x344) returned 0x1 [0164.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d8b0) returned 1 [0164.838] GetFileType (hFile=0x344) returned 0x1 [0164.840] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x63 [0164.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.840] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.841] GetFileType (hFile=0x344) returned 0x1 [0164.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.841] GetFileType (hFile=0x344) returned 0x1 [0164.842] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x57 [0164.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.842] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.843] GetFileType (hFile=0x344) returned 0x1 [0164.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.843] GetFileType (hFile=0x344) returned 0x1 [0164.844] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4a [0164.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.845] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.846] GetFileType (hFile=0x344) returned 0x1 [0164.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.846] GetFileType (hFile=0x344) returned 0x1 [0164.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.847] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0164.847] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x33 [0164.847] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.848] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.848] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0164.848] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0164.849] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0 [0164.849] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.849] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0164.849] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x33 [0164.849] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0164.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0164.850] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.851] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.851] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0164.851] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x61 [0164.851] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0164.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0164.854] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.855] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.856] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0164.856] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x61 [0164.856] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.857] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.858] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0164.858] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0164.858] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0164.858] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.859] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x6e [0164.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.859] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.861] GetFileType (hFile=0x344) returned 0x1 [0164.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.861] GetFileType (hFile=0x344) returned 0x1 [0164.863] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x40 [0164.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.863] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.864] GetFileType (hFile=0x344) returned 0x1 [0164.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.864] GetFileType (hFile=0x344) returned 0x1 [0164.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.865] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0164.865] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x3e [0164.865] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.866] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.866] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0164.866] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0164.866] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0164.867] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0164.867] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x12d700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x3e [0164.867] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x12d910 | out: lpFindFileData=0x12d910*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.867] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.868] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0164.868] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d960 | out: lpFindFileData=0x12d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.868] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbc0) returned 1 [0164.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db80) returned 1 [0164.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.868] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0164.868] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x41 [0164.869] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.869] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.869] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0164.870] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0164.870] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0164.870] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0164.870] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0164.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0164.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x12d680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x41 [0164.871] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x12d890 | out: lpFindFileData=0x12d890*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.871] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.872] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0164.872] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0164.872] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0164.873] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d8e0 | out: lpFindFileData=0x12d8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.873] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db40) returned 1 [0164.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db00) returned 1 [0164.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.873] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0164.873] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x4e [0164.873] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.875] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.875] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.875] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.876] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0164.876] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x4e [0164.876] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.876] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.877] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.877] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x5b [0164.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.877] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.880] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0164.880] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x46 [0164.881] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.881] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.881] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.882] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.882] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0164.882] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x46 [0164.882] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.883] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.883] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.883] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.883] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0164.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.884] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.885] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0164.885] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x46 [0164.886] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.886] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.886] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.887] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db70) returned 1 [0164.887] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0164.887] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x12d600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x46 [0164.887] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x12d810 | out: lpFindFileData=0x12d810*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.887] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.888] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12d860 | out: lpFindFileData=0x12d860*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0164.888] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dac0) returned 1 [0164.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da80) returned 1 [0164.888] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x53 [0164.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d9c0) returned 1 [0164.888] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d930) returned 1 [0164.890] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4e [0164.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12da40) returned 1 [0164.890] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d9b0) returned 1 [0164.892] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x4b [0164.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dac0) returned 1 [0164.892] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12da30) returned 1 [0164.894] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x38 [0164.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db40) returned 1 [0164.894] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dab0) returned 1 [0164.896] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0164.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.896] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\roaming\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.898] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0164.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.898] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\appdata\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.900] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0164.900] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data\\", lpFilePart=0x0) returned 0x22 [0164.900] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0164.902] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2f [0164.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.902] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\application data\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.903] GetFileType (hFile=0x344) returned 0x1 [0164.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.903] GetFileType (hFile=0x344) returned 0x1 [0164.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.904] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0164.904] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\", lpFilePart=0x0) returned 0x1a [0164.905] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.905] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.905] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0164.905] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.906] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.906] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.906] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0164.906] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\", lpFilePart=0x0) returned 0x1a [0164.906] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.906] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0164.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.907] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0164.907] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.908] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0164.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.908] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\contacts\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.909] GetFileType (hFile=0x344) returned 0x1 [0164.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.909] GetFileType (hFile=0x344) returned 0x1 [0164.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.910] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0164.910] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies\\", lpFilePart=0x0) returned 0x19 [0164.910] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0164.913] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0164.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.913] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\cookies\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.918] GetFileType (hFile=0x344) returned 0x1 [0164.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.918] GetFileType (hFile=0x344) returned 0x1 [0164.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.919] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0164.920] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\", lpFilePart=0x0) returned 0x19 [0164.920] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.920] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.921] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.921] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.921] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.921] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0164.921] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\", lpFilePart=0x0) returned 0x19 [0164.922] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.922] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.922] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0164.923] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0164.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.923] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\desktop\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.923] GetFileType (hFile=0x344) returned 0x1 [0164.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.924] GetFileType (hFile=0x344) returned 0x1 [0164.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.925] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0164.925] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\", lpFilePart=0x0) returned 0x1b [0164.925] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.926] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0164.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0164.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0164.927] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0164.927] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.928] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0164.928] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\", lpFilePart=0x0) returned 0x1b [0164.928] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.929] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0164.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0164.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0164.930] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.930] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.931] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0164.931] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music\\", lpFilePart=0x0) returned 0x24 [0164.931] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0164.937] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0164.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.937] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\documents\\my music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.941] GetFileType (hFile=0x344) returned 0x1 [0164.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.941] GetFileType (hFile=0x344) returned 0x1 [0164.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.942] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0164.942] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x27 [0164.942] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0164.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x34 [0164.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.949] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\documents\\my pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.952] GetFileType (hFile=0x344) returned 0x1 [0164.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.952] GetFileType (hFile=0x344) returned 0x1 [0164.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.953] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0164.953] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x25 [0164.953] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0164.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0164.959] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0164.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.959] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\documents\\my videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.961] GetFileType (hFile=0x344) returned 0x1 [0164.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.961] GetFileType (hFile=0x344) returned 0x1 [0164.963] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0164.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.963] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.964] GetFileType (hFile=0x344) returned 0x1 [0164.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.964] GetFileType (hFile=0x344) returned 0x1 [0164.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.966] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0164.966] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\", lpFilePart=0x0) returned 0x1b [0164.966] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.967] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.968] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.968] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.968] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.969] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0164.969] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\", lpFilePart=0x0) returned 0x1b [0164.969] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.969] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.970] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.970] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0164.970] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.971] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0164.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0164.971] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\downloads\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.971] GetFileType (hFile=0x344) returned 0x1 [0164.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0164.972] GetFileType (hFile=0x344) returned 0x1 [0164.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.973] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0164.973] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\", lpFilePart=0x0) returned 0x1b [0164.973] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.977] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0164.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0164.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0164.978] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0164.979] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0164.979] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0164.981] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0164.981] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\", lpFilePart=0x0) returned 0x1b [0164.981] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.982] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.983] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.983] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0164.984] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0164.984] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0164.985] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0164.985] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.985] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0164.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0164.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.986] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0164.986] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\", lpFilePart=0x0) returned 0x21 [0164.987] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.988] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.989] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.989] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0164.989] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.989] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.990] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0164.990] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\", lpFilePart=0x0) returned 0x21 [0164.990] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.990] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.990] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0164.991] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0164.991] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0164.991] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0164.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0164.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0164.992] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2e [0164.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0164.992] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\favorites\\links\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0164.992] GetFileType (hFile=0x344) returned 0x1 [0164.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0164.992] GetFileType (hFile=0x344) returned 0x1 [0164.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0164.994] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0164.994] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x2e [0164.994] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0164.997] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.997] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0164.997] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0164.997] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0164.998] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0164.998] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0165.005] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.006] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.007] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0165.007] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x2e [0165.007] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0165.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0165.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0165.008] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0165.009] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0165.009] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0165.009] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.010] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x3b [0165.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.010] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.011] GetFileType (hFile=0x344) returned 0x1 [0165.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.012] GetFileType (hFile=0x344) returned 0x1 [0165.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.013] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0165.013] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x28 [0165.013] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.015] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0165.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0165.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0165.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0165.016] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0165.017] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0165.017] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.017] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.018] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0165.018] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x28 [0165.018] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.019] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.020] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0165.020] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0165.020] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0165.020] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0165.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0165.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0165.021] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0165.021] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.022] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x35 [0165.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.022] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\favorites\\msn websites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.024] GetFileType (hFile=0x344) returned 0x1 [0165.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.024] GetFileType (hFile=0x344) returned 0x1 [0165.025] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0165.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.025] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\favorites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.026] GetFileType (hFile=0x344) returned 0x1 [0165.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.026] GetFileType (hFile=0x344) returned 0x1 [0165.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.027] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0165.027] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\", lpFilePart=0x0) returned 0x17 [0165.027] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.030] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.030] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.030] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0165.031] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.031] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.104] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0165.105] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\", lpFilePart=0x0) returned 0x17 [0165.105] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.106] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0165.107] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0165.107] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0165.107] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0165.107] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.108] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0165.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.108] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.109] GetFileType (hFile=0x344) returned 0x1 [0165.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.110] GetFileType (hFile=0x344) returned 0x1 [0165.110] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x1d3 [0165.110] ReadFile (in: hFile=0x344, lpBuffer=0x26f9440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26f9440*, lpNumberOfBytesRead=0x12dd38*=0x1d3, lpOverlapped=0x0) returned 1 [0165.171] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0165.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.171] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.172] GetFileType (hFile=0x344) returned 0x1 [0165.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.172] GetFileType (hFile=0x344) returned 0x1 [0165.173] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0165.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.174] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.175] GetFileType (hFile=0x344) returned 0x1 [0165.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.175] GetFileType (hFile=0x344) returned 0x1 [0165.176] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0165.176] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x2c [0165.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe55390, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0165.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.176] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\links\\desktop.lnk.symmyware")) returned 1 [0165.177] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0165.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.177] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.177] GetFileType (hFile=0x344) returned 0x1 [0165.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.177] GetFileType (hFile=0x344) returned 0x1 [0165.177] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x37e [0165.178] ReadFile (in: hFile=0x344, lpBuffer=0x274dbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x274dbd8*, lpNumberOfBytesRead=0x12dd38*=0x37e, lpOverlapped=0x0) returned 1 [0165.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0165.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.237] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.239] GetFileType (hFile=0x344) returned 0x1 [0165.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.239] GetFileType (hFile=0x344) returned 0x1 [0165.240] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0165.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.240] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.241] GetFileType (hFile=0x344) returned 0x1 [0165.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.241] GetFileType (hFile=0x344) returned 0x1 [0165.242] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0165.242] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x2e [0165.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed90f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0165.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.243] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\links\\downloads.lnk.symmyware")) returned 1 [0165.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0165.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.243] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.244] GetFileType (hFile=0x344) returned 0x1 [0165.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.244] GetFileType (hFile=0x344) returned 0x1 [0165.244] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x16b [0165.244] ReadFile (in: hFile=0x344, lpBuffer=0x27a27c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x27a27c0*, lpNumberOfBytesRead=0x12dd38*=0x16b, lpOverlapped=0x0) returned 1 [0165.253] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0165.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.253] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.254] GetFileType (hFile=0x344) returned 0x1 [0165.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.255] GetFileType (hFile=0x344) returned 0x1 [0165.256] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0165.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.256] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.257] GetFileType (hFile=0x344) returned 0x1 [0165.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.257] GetFileType (hFile=0x344) returned 0x1 [0165.258] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0165.258] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x31 [0165.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefdae0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0165.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.258] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.SYMMYWARE" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.symmyware")) returned 1 [0165.259] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0165.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.259] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\links\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.259] GetFileType (hFile=0x344) returned 0x1 [0165.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.259] GetFileType (hFile=0x344) returned 0x1 [0165.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.261] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0165.261] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings\\", lpFilePart=0x0) returned 0x20 [0165.261] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.296] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2d [0165.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.297] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\local settings\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.298] GetFileType (hFile=0x344) returned 0x1 [0165.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.298] GetFileType (hFile=0x344) returned 0x1 [0165.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.299] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0165.299] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\", lpFilePart=0x0) returned 0x17 [0165.299] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc23b30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc23b30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc23b30, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc26240, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.300] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.301] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.301] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0165.301] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\", lpFilePart=0x0) returned 0x17 [0165.301] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc23b30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.301] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc23b30, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.302] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.302] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc23b30, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc26240, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.302] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc23b30, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc23b30, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc26240, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.302] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.302] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0165.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.302] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.303] GetFileType (hFile=0x344) returned 0x1 [0165.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.303] GetFileType (hFile=0x344) returned 0x1 [0165.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.304] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0165.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents\\", lpFilePart=0x0) returned 0x1e [0165.305] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.307] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2b [0165.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.307] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\my documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.308] GetFileType (hFile=0x344) returned 0x1 [0165.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.308] GetFileType (hFile=0x344) returned 0x1 [0165.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.309] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0165.309] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood\\", lpFilePart=0x0) returned 0x19 [0165.309] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.312] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0165.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.312] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\nethood\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.313] GetFileType (hFile=0x344) returned 0x1 [0165.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.313] GetFileType (hFile=0x344) returned 0x1 [0165.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.314] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0165.314] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\", lpFilePart=0x0) returned 0x1a [0165.314] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc3e8e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.315] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc3e8e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.315] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.316] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e8e0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc40ff0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.316] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.316] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.316] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0165.317] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\", lpFilePart=0x0) returned 0x1a [0165.317] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc3e8e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.317] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc3e8e0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.317] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.317] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e8e0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc40ff0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.317] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e8e0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc3e8e0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc40ff0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.318] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.318] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.318] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.319] GetFileType (hFile=0x344) returned 0x1 [0165.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.319] GetFileType (hFile=0x344) returned 0x1 [0165.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.320] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0165.320] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood\\", lpFilePart=0x0) returned 0x1b [0165.320] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.323] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0165.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.323] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\printhood\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.323] GetFileType (hFile=0x344) returned 0x1 [0165.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.323] GetFileType (hFile=0x344) returned 0x1 [0165.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.324] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0165.325] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent\\", lpFilePart=0x0) returned 0x18 [0165.325] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.327] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x25 [0165.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.327] CreateFileW (lpFileName="C:\\Users\\Default\\Recent\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\recent\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.365] GetFileType (hFile=0x344) returned 0x1 [0165.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.365] GetFileType (hFile=0x344) returned 0x1 [0165.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0165.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\", lpFilePart=0x0) returned 0x1d [0165.367] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.367] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.367] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.368] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.368] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0165.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\", lpFilePart=0x0) returned 0x1d [0165.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.368] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.369] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.369] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0165.369] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.369] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x2a [0165.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.369] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\saved games\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.370] GetFileType (hFile=0x344) returned 0x1 [0165.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.370] GetFileType (hFile=0x344) returned 0x1 [0165.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.371] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0165.371] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\", lpFilePart=0x0) returned 0x1a [0165.371] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.373] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.373] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.374] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0165.374] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0165.374] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.374] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0165.375] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\", lpFilePart=0x0) returned 0x1a [0165.375] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.376] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.376] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0165.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0165.377] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0165.377] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.378] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.378] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\searches\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.380] GetFileType (hFile=0x344) returned 0x1 [0165.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.380] GetFileType (hFile=0x344) returned 0x1 [0165.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.381] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0165.381] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo\\", lpFilePart=0x0) returned 0x18 [0165.381] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.384] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x25 [0165.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.384] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\sendto\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.386] GetFileType (hFile=0x344) returned 0x1 [0165.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.387] GetFileType (hFile=0x344) returned 0x1 [0165.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0165.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu\\", lpFilePart=0x0) returned 0x1c [0165.388] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.390] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x29 [0165.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.390] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\start menu\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.391] GetFileType (hFile=0x344) returned 0x1 [0165.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.391] GetFileType (hFile=0x344) returned 0x1 [0165.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.392] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0165.392] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates\\", lpFilePart=0x0) returned 0x1b [0165.392] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd20) returned 1 [0165.395] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x28 [0165.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.395] CreateFileW (lpFileName="C:\\Users\\Default\\Templates\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\templates\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.395] GetFileType (hFile=0x344) returned 0x1 [0165.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.395] GetFileType (hFile=0x344) returned 0x1 [0165.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.397] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0165.397] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\", lpFilePart=0x0) returned 0x18 [0165.397] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc52160, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc52160, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc52160, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc56f80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.398] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.398] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.399] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0165.399] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\", lpFilePart=0x0) returned 0x18 [0165.399] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc52160, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc52160, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.399] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc52160, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc56f80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.400] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc52160, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0xfc52160, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0xfc56f80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.400] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.400] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x25 [0165.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.400] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.402] GetFileType (hFile=0x344) returned 0x1 [0165.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.402] GetFileType (hFile=0x344) returned 0x1 [0165.403] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1e [0165.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0165.403] CreateFileW (lpFileName="C:\\Users\\Default\\SYMMYWARE.TXT" (normalized: "c:\\users\\default\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.403] GetFileType (hFile=0x344) returned 0x1 [0165.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0165.403] GetFileType (hFile=0x344) returned 0x1 [0165.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0165.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0165.405] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\", lpFilePart=0x0) returned 0x16 [0165.405] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dda0) returned 1 [0165.407] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x23 [0165.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0165.408] CreateFileW (lpFileName="C:\\Users\\Default User\\SYMMYWARE.TXT" (normalized: "c:\\users\\default user\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.409] GetFileType (hFile=0x344) returned 0x1 [0165.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0165.409] GetFileType (hFile=0x344) returned 0x1 [0165.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0165.410] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0165.410] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0165.410] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.410] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.410] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0165.411] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0165.412] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0165.412] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0165.412] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0165.412] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0165.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0165.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12de70) returned 1 [0165.412] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x12d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0165.412] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x12d900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0165.413] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x12db10 | out: lpFindFileData=0x12db10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.413] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.413] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0165.413] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.413] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0165.413] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0165.414] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0165.415] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12db60 | out: lpFindFileData=0x12db60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.415] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ddc0) returned 1 [0165.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd80) returned 1 [0165.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.415] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0165.415] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0165.415] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.415] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbded4c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd148050, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.416] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.416] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.417] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0165.417] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0165.417] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.417] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbded4c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.417] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0165.417] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0165.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0165.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbded4c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd148050, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.418] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbded4c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbded4c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd148050, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.418] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.419] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0165.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.419] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.419] GetFileType (hFile=0x344) returned 0x1 [0165.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.419] GetFileType (hFile=0x344) returned 0x1 [0165.419] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x7e9 [0165.419] ReadFile (in: hFile=0x344, lpBuffer=0x2842958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2842958*, lpNumberOfBytesRead=0x12dd38*=0x7e9, lpOverlapped=0x0) returned 1 [0165.458] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0165.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.458] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.464] GetFileType (hFile=0x344) returned 0x1 [0165.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.464] GetFileType (hFile=0x344) returned 0x1 [0165.466] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0165.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.466] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.467] GetFileType (hFile=0x344) returned 0x1 [0165.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.468] GetFileType (hFile=0x344) returned 0x1 [0165.469] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0165.469] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x34 [0165.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x100f70d0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0165.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.470] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.SYMMYWARE" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.symmyware")) returned 1 [0165.472] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0165.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.472] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.472] GetFileType (hFile=0x344) returned 0x1 [0165.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.472] GetFileType (hFile=0x344) returned 0x1 [0165.472] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x8d1 [0165.472] ReadFile (in: hFile=0x344, lpBuffer=0x2899350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x2899350*, lpNumberOfBytesRead=0x12dd38*=0x8d1, lpOverlapped=0x0) returned 1 [0165.486] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0165.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.486] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.488] GetFileType (hFile=0x344) returned 0x1 [0165.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.488] GetFileType (hFile=0x344) returned 0x1 [0165.490] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0165.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.490] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.491] GetFileType (hFile=0x344) returned 0x1 [0165.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.491] GetFileType (hFile=0x344) returned 0x1 [0165.493] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0165.493] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x33 [0165.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10131a50, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0165.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.493] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.SYMMYWARE" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.symmyware")) returned 1 [0165.495] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0165.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.495] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.495] GetFileType (hFile=0x344) returned 0x1 [0165.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.495] GetFileType (hFile=0x344) returned 0x1 [0165.496] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12de08 | out: lpFileSizeHigh=0x12de08*=0x0) returned 0x485 [0165.496] ReadFile (in: hFile=0x344, lpBuffer=0x26eff60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12dd38, lpOverlapped=0x0 | out: lpBuffer=0x26eff60*, lpNumberOfBytesRead=0x12dd38*=0x485, lpOverlapped=0x0) returned 1 [0165.531] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0165.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbb0) returned 1 [0165.531] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.533] GetFileType (hFile=0x344) returned 0x1 [0165.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db20) returned 1 [0165.533] GetFileType (hFile=0x344) returned 0x1 [0165.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0165.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc70) returned 1 [0165.535] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.537] GetFileType (hFile=0x344) returned 0x1 [0165.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbe0) returned 1 [0165.537] GetFileType (hFile=0x344) returned 0x1 [0165.539] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0165.539] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.SYMMYWARE", lpFilePart=0x0) returned 0x35 [0165.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12de50 | out: lpFileInformation=0x12de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x1019d110, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0165.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0165.539] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.SYMMYWARE" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.symmyware")) returned 1 [0165.541] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x25 [0165.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.541] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\desktop\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.542] GetFileType (hFile=0x344) returned 0x1 [0165.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.542] GetFileType (hFile=0x344) returned 0x1 [0165.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0165.544] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0165.544] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.544] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe03450, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd1606f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.545] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.545] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.546] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0165.546] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0165.546] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.546] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe03450, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.546] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.546] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0165.547] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0165.547] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0165.547] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe03450, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd1606f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.547] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe03450, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe03450, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd1606f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.547] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0165.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\", lpFilePart=0x0) returned 0x23 [0165.548] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0165.550] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x30 [0165.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.550] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\documents\\my music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.551] GetFileType (hFile=0x344) returned 0x1 [0165.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.551] GetFileType (hFile=0x344) returned 0x1 [0165.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.552] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0165.552] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x26 [0165.552] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0165.554] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x33 [0165.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.554] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\documents\\my pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.555] GetFileType (hFile=0x344) returned 0x1 [0165.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.555] GetFileType (hFile=0x344) returned 0x1 [0165.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.556] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0165.556] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x24 [0165.556] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0165.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dca0) returned 1 [0165.559] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x31 [0165.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.559] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\documents\\my videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.560] GetFileType (hFile=0x344) returned 0x1 [0165.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.560] GetFileType (hFile=0x344) returned 0x1 [0165.561] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.561] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\documents\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.563] GetFileType (hFile=0x344) returned 0x1 [0165.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.563] GetFileType (hFile=0x344) returned 0x1 [0165.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0165.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0165.564] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.565] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.565] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.565] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.565] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0165.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0165.566] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.566] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.567] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.567] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0165.567] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.567] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.567] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\downloads\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.568] GetFileType (hFile=0x344) returned 0x1 [0165.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.568] GetFileType (hFile=0x344) returned 0x1 [0165.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.645] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0165.645] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0165.645] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe3b6c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd171860, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.646] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.646] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.647] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0165.647] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0165.647] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.647] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xfbe3b6c0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.647] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe3b6c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd171860, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.647] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe3b6c0, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xfbe3b6c0, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xd171860, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.648] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.648] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.648] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\favorites\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.683] GetFileType (hFile=0x344) returned 0x1 [0165.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.683] GetFileType (hFile=0x344) returned 0x1 [0165.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.685] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0165.685] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0165.685] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.686] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.687] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0165.687] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.688] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.688] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0165.688] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0165.688] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.689] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0165.690] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0165.690] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.690] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x27 [0165.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.690] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\libraries\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.726] GetFileType (hFile=0x344) returned 0x1 [0165.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.726] GetFileType (hFile=0x344) returned 0x1 [0165.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0165.728] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0165.728] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bcce0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.728] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bcce0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.729] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.729] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0165.729] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101bcce0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bf3f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.730] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.730] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.730] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0165.730] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0165.730] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bcce0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.730] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bcce0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0165.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101bcce0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bf3f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.731] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101bcce0, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101bcce0, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101bf3f0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.731] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.731] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0165.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0165.732] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.767] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.767] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.767] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0165.768] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0165.768] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0165.769] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.769] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.770] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0165.770] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0165.770] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.772] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.772] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.772] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0165.773] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0165.773] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0165.773] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0165.774] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.775] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x30 [0165.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0165.775] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\music\\sample music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.777] GetFileType (hFile=0x344) returned 0x1 [0165.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0165.777] GetFileType (hFile=0x344) returned 0x1 [0165.779] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x23 [0165.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0165.779] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\music\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x344 [0165.780] GetFileType (hFile=0x344) returned 0x1 [0165.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0165.780] GetFileType (hFile=0x344) returned 0x1 [0165.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.810] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0165.810] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0165.810] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c6920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.811] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c6920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.811] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.811] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0165.811] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101c6920, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c9030, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.812] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.812] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0165.812] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0165.812] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0165.813] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c6920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.813] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c6920, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.813] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.814] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0165.814] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101c6920, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c9030, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0165.814] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101c6920, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101c6920, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101c9030, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0165.814] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0165.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0165.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.815] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0165.815] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0165.815] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.817] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.817] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0165.817] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0165.818] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.818] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0165.821] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0165.821] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0165.821] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0165.821] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0165.822] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0165.822] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.822] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0165.823] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0165.823] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0165.824] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfd1500 [0165.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0165.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0165.825] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0165.826] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0165.827] FindNextFileW (in: hFindFile=0xfd1500, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0165.827] FindClose (in: hFindFile=0xfd1500 | out: hFindFile=0xfd1500) returned 1 [0165.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0165.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0165.827] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0165.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0165.828] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0165.829] GetFileType (hFile=0x344) returned 0x1 [0165.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0165.830] GetFileType (hFile=0x344) returned 0x1 [0165.830] GetFileSize (in: hFile=0x344, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xd6b22 [0165.830] ReadFile (in: hFile=0x344, lpBuffer=0x12829cc8, nNumberOfBytesToRead=0xd6b22, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12829cc8*, lpNumberOfBytesRead=0x12dcb8*=0xd6b22, lpOverlapped=0x0) returned 1 [0165.842] CloseHandle (hObject=0x344) returned 1 [0166.017] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0166.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0166.017] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x340 [0166.018] GetFileType (hFile=0x340) returned 0x1 [0166.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0166.018] GetFileType (hFile=0x340) returned 0x1 [0166.020] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0166.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.020] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0166.021] GetFileType (hFile=0x340) returned 0x1 [0166.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.021] GetFileType (hFile=0x340) returned 0x1 [0166.021] WriteFile (in: hFile=0x340, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0xd6b30, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0xd6b30, lpOverlapped=0x0) returned 1 [0166.039] CloseHandle (hObject=0x340) returned 1 [0166.039] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0166.039] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x44 [0166.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0166.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1062e800, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30)) returned 1 [0166.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0166.040] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.symmyware")) returned 1 [0166.041] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0166.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.041] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0166.042] GetFileType (hFile=0x340) returned 0x1 [0166.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.042] GetFileType (hFile=0x340) returned 0x1 [0166.042] GetFileSize (in: hFile=0x340, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xce875 [0166.044] ReadFile (in: hFile=0x340, lpBuffer=0x12900828, nNumberOfBytesToRead=0xce875, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12900828*, lpNumberOfBytesRead=0x12dcb8*=0xce875, lpOverlapped=0x0) returned 1 [0166.055] CloseHandle (hObject=0x340) returned 1 [0166.300] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0166.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0166.301] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0166.309] GetFileType (hFile=0x15c) returned 0x1 [0166.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0166.309] GetFileType (hFile=0x15c) returned 0x1 [0166.311] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0166.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.311] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.312] GetFileType (hFile=0x15c) returned 0x1 [0166.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.312] GetFileType (hFile=0x15c) returned 0x1 [0166.312] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0xce880, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0xce880, lpOverlapped=0x0) returned 1 [0166.328] CloseHandle (hObject=0x15c) returned 1 [0166.328] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0166.328] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x3d [0166.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0166.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x108c9010, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xce880)) returned 1 [0166.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0166.330] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.symmyware")) returned 1 [0166.331] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0166.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.331] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.332] GetFileType (hFile=0x15c) returned 0x1 [0166.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.333] GetFileType (hFile=0x15c) returned 0x1 [0166.333] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x91554 [0166.335] ReadFile (in: hFile=0x15c, lpBuffer=0x127a0a58, nNumberOfBytesToRead=0x91554, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x127a0a58*, lpNumberOfBytesRead=0x12dcb8*=0x91554, lpOverlapped=0x0) returned 1 [0166.348] CloseHandle (hObject=0x15c) returned 1 [0166.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0166.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0166.440] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0166.448] GetFileType (hFile=0x15c) returned 0x1 [0166.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0166.448] GetFileType (hFile=0x15c) returned 0x1 [0166.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0166.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.451] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.452] GetFileType (hFile=0x15c) returned 0x1 [0166.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.452] GetFileType (hFile=0x15c) returned 0x1 [0166.452] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0x91560, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0x91560, lpOverlapped=0x0) returned 1 [0166.468] CloseHandle (hObject=0x15c) returned 1 [0166.468] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0166.469] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0166.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0166.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x10a0b450, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x91560)) returned 1 [0166.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0166.469] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.symmyware")) returned 1 [0166.473] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0166.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.474] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.476] GetFileType (hFile=0x15c) returned 0x1 [0166.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.476] GetFileType (hFile=0x15c) returned 0x1 [0166.476] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xbd616 [0166.478] ReadFile (in: hFile=0x15c, lpBuffer=0x12831fe8, nNumberOfBytesToRead=0xbd616, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12831fe8*, lpNumberOfBytesRead=0x12dcb8*=0xbd616, lpOverlapped=0x0) returned 1 [0166.490] CloseHandle (hObject=0x15c) returned 1 [0166.599] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0166.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0166.599] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0166.609] GetFileType (hFile=0x15c) returned 0x1 [0166.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0166.609] GetFileType (hFile=0x15c) returned 0x1 [0166.610] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0166.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.611] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.612] GetFileType (hFile=0x15c) returned 0x1 [0166.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.612] GetFileType (hFile=0x15c) returned 0x1 [0166.612] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0xbd620, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0xbd620, lpOverlapped=0x0) returned 1 [0166.632] CloseHandle (hObject=0x15c) returned 1 [0166.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0166.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x40 [0166.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0166.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x10b8f740, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbd620)) returned 1 [0166.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0166.633] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.symmyware")) returned 1 [0166.634] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0166.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.634] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.634] GetFileType (hFile=0x15c) returned 0x1 [0166.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.634] GetFileType (hFile=0x15c) returned 0x1 [0166.634] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xbea1f [0166.636] ReadFile (in: hFile=0x15c, lpBuffer=0x128ef638, nNumberOfBytesToRead=0xbea1f, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x128ef638*, lpNumberOfBytesRead=0x12dcb8*=0xbea1f, lpOverlapped=0x0) returned 1 [0166.647] CloseHandle (hObject=0x15c) returned 1 [0166.770] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0166.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0166.770] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0166.779] GetFileType (hFile=0x15c) returned 0x1 [0166.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0166.779] GetFileType (hFile=0x15c) returned 0x1 [0166.781] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0166.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.781] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.782] GetFileType (hFile=0x15c) returned 0x1 [0166.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.782] GetFileType (hFile=0x15c) returned 0x1 [0166.782] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0xbea20, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0xbea20, lpOverlapped=0x0) returned 1 [0166.802] CloseHandle (hObject=0x15c) returned 1 [0166.803] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0166.803] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x3c [0166.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0166.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x10d299c0, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbea20)) returned 1 [0166.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0166.804] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.symmyware")) returned 1 [0166.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0166.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0166.805] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0166.806] GetFileType (hFile=0x15c) returned 0x1 [0166.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0166.806] GetFileType (hFile=0x15c) returned 0x1 [0166.806] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x8907c [0166.810] ReadFile (in: hFile=0x15c, lpBuffer=0x12790bf8, nNumberOfBytesToRead=0x8907c, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12790bf8*, lpNumberOfBytesRead=0x12dcb8*=0x8907c, lpOverlapped=0x0) returned 1 [0166.820] CloseHandle (hObject=0x15c) returned 1 [0167.001] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0167.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0167.001] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.009] GetFileType (hFile=0x15c) returned 0x1 [0167.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0167.009] GetFileType (hFile=0x15c) returned 0x1 [0167.011] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0167.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.011] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.012] GetFileType (hFile=0x15c) returned 0x1 [0167.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.012] GetFileType (hFile=0x15c) returned 0x1 [0167.012] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0x89080, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0x89080, lpOverlapped=0x0) returned 1 [0167.028] CloseHandle (hObject=0x15c) returned 1 [0167.028] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0167.028] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x41 [0167.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0167.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x10f3dd60, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x89080)) returned 1 [0167.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0167.029] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.symmyware")) returned 1 [0167.030] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0167.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.030] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.031] GetFileType (hFile=0x15c) returned 0x1 [0167.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.031] GetFileType (hFile=0x15c) returned 0x1 [0167.031] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0xbde6b [0167.034] ReadFile (in: hFile=0x15c, lpBuffer=0x12819cb0, nNumberOfBytesToRead=0xbde6b, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12819cb0*, lpNumberOfBytesRead=0x12dcb8*=0xbde6b, lpOverlapped=0x0) returned 1 [0167.045] CloseHandle (hObject=0x15c) returned 1 [0167.141] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0167.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0167.142] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.151] GetFileType (hFile=0x15c) returned 0x1 [0167.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0167.151] GetFileType (hFile=0x15c) returned 0x1 [0167.152] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0167.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.153] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.154] GetFileType (hFile=0x15c) returned 0x1 [0167.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.154] GetFileType (hFile=0x15c) returned 0x1 [0167.154] WriteFile (in: hFile=0x15c, lpBuffer=0x126d21a0*, nNumberOfBytesToWrite=0xbde70, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x126d21a0*, lpNumberOfBytesWritten=0x12dd18*=0xbde70, lpOverlapped=0x0) returned 1 [0167.172] CloseHandle (hObject=0x15c) returned 1 [0167.173] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0167.173] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x3f [0167.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0167.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x11096130, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0xbde70)) returned 1 [0167.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0167.173] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.symmyware")) returned 1 [0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0167.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.175] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.175] GetFileType (hFile=0x15c) returned 0x1 [0167.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.175] GetFileType (hFile=0x15c) returned 0x1 [0167.175] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x97958 [0167.177] ReadFile (in: hFile=0x15c, lpBuffer=0x128d7b58, nNumberOfBytesToRead=0x97958, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x128d7b58*, lpNumberOfBytesRead=0x12dcb8*=0x97958, lpOverlapped=0x0) returned 1 [0167.189] CloseHandle (hObject=0x15c) returned 1 [0167.294] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0167.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0167.294] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.303] GetFileType (hFile=0x15c) returned 0x1 [0167.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0167.303] GetFileType (hFile=0x15c) returned 0x1 [0167.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0167.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.305] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.306] GetFileType (hFile=0x15c) returned 0x1 [0167.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.306] GetFileType (hFile=0x15c) returned 0x1 [0167.306] WriteFile (in: hFile=0x15c, lpBuffer=0x1296f4e8*, nNumberOfBytesToWrite=0x97960, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x1296f4e8*, lpNumberOfBytesWritten=0x12dd18*=0x97960, lpOverlapped=0x0) returned 1 [0167.320] CloseHandle (hObject=0x15c) returned 1 [0167.320] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0167.321] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.SYMMYWARE", lpFilePart=0x0) returned 0x3d [0167.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0167.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x111d3750, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x97960)) returned 1 [0167.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0167.321] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.SYMMYWARE" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.symmyware")) returned 1 [0167.322] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0167.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0167.322] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\pictures\\sample pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.323] GetFileType (hFile=0x15c) returned 0x1 [0167.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0167.323] GetFileType (hFile=0x15c) returned 0x1 [0167.324] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x26 [0167.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0167.324] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\pictures\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.326] GetFileType (hFile=0x15c) returned 0x1 [0167.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0167.326] GetFileType (hFile=0x15c) returned 0x1 [0167.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0167.328] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0167.328] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0167.328] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.329] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.329] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.329] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0167.329] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0167.330] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0167.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0167.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0167.330] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0167.330] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0167.330] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.331] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.331] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.331] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0167.331] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.332] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0167.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0167.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0167.332] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0167.332] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0167.332] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.333] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.334] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.334] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0167.334] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.334] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0167.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0167.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0167.335] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0167.335] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0167.335] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.335] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.335] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.336] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0167.336] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0167.336] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0167.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0167.336] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x36 [0167.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0167.337] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\recorded tv\\sample media\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.339] GetFileType (hFile=0x15c) returned 0x1 [0167.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0167.340] GetFileType (hFile=0x15c) returned 0x1 [0167.341] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x29 [0167.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0167.341] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\recorded tv\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0167.342] GetFileType (hFile=0x15c) returned 0x1 [0167.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0167.342] GetFileType (hFile=0x15c) returned 0x1 [0167.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0167.343] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0167.343] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0167.343] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d2c70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.344] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d2c70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.344] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.344] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0167.344] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101d2c70, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d5380, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0167.344] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.344] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0167.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0167.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddf0) returned 1 [0167.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0167.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x12d880, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0167.345] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x12da90 | out: lpFindFileData=0x12da90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d2c70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.345] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d2c70, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.345] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.346] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0167.346] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101d2c70, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d5380, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 1 [0167.346] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12dae0 | out: lpFindFileData=0x12dae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101d2c70, ftCreationTime.dwHighDateTime=0x1d69744, ftLastAccessTime.dwLowDateTime=0x101d2c70, ftLastAccessTime.dwHighDateTime=0x1d69744, ftLastWriteTime.dwLowDateTime=0x101d5380, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMMYWARE.TXT", cAlternateFileName="SYMMYW~1.TXT")) returned 0 [0167.346] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd40) returned 1 [0167.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd00) returned 1 [0167.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0167.346] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0167.346] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0167.346] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.347] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.347] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.347] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0167.347] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.348] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0167.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0167.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd70) returned 1 [0167.348] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0167.348] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x12d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0167.348] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x12da10 | out: lpFindFileData=0x12da10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x35a360 [0167.348] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.348] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0167.349] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0167.349] FindNextFileW (in: hFindFile=0x35a360, lpFindFileData=0x12da60 | out: lpFindFileData=0x12da60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0167.349] FindClose (in: hFindFile=0x35a360 | out: hFindFile=0x35a360) returned 1 [0167.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcc0) returned 1 [0167.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc80) returned 1 [0167.349] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0167.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0167.349] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0167.350] GetFileType (hFile=0x15c) returned 0x1 [0167.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0167.350] GetFileType (hFile=0x15c) returned 0x1 [0167.350] GetFileSize (in: hFile=0x15c, lpFileSizeHigh=0x12dd88 | out: lpFileSizeHigh=0x12dd88*=0x0) returned 0x1907b8a [0167.351] ReadFile (in: hFile=0x15c, lpBuffer=0x12bcdad0, nNumberOfBytesToRead=0x1907b8a, lpNumberOfBytesRead=0x12dcb8, lpOverlapped=0x0 | out: lpBuffer=0x12bcdad0*, lpNumberOfBytesRead=0x12dcb8*=0x1907b8a, lpOverlapped=0x0) returned 1 [0168.392] CloseHandle (hObject=0x15c) returned 1 [0169.634] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x12d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0169.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12db30) returned 1 [0169.634] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0169.639] GetFileType (hFile=0x15c) returned 0x1 [0169.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12daa0) returned 1 [0169.639] GetFileType (hFile=0x15c) returned 0x1 [0169.641] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x12d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0169.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbf0) returned 1 [0169.641] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x15c [0169.642] GetFileType (hFile=0x15c) returned 0x1 [0169.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db60) returned 1 [0169.642] GetFileType (hFile=0x15c) returned 0x1 [0169.642] WriteFile (in: hFile=0x15c, lpBuffer=0x144d5698*, nNumberOfBytesToWrite=0x1907b90, lpNumberOfBytesWritten=0x12dd18, lpOverlapped=0x0 | out: lpBuffer=0x144d5698*, lpNumberOfBytesWritten=0x12dd18*=0x1907b90, lpOverlapped=0x0) returned 1 [0170.814] CloseHandle (hObject=0x15c) returned 1 [0170.814] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0170.814] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.SYMMYWARE", nBufferLength=0x105, lpBuffer=0x12d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.SYMMYWARE", lpFilePart=0x0) returned 0x3b [0170.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcf0) returned 1 [0170.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12ddd0 | out: lpFileInformation=0x12ddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x13149a80, ftLastWriteTime.dwHighDateTime=0x1d69744, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90)) returned 1 [0170.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0170.814] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.SYMMYWARE" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.symmyware")) returned 1 [0170.815] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x32 [0170.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dbc0) returned 1 [0170.816] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\videos\\sample videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0170.816] GetFileType (hFile=0x15c) returned 0x1 [0170.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12db30) returned 1 [0170.816] GetFileType (hFile=0x15c) returned 0x1 [0170.817] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d760, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x24 [0170.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dc40) returned 1 [0170.818] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\videos\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0170.818] GetFileType (hFile=0x15c) returned 0x1 [0170.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dbb0) returned 1 [0170.818] GetFileType (hFile=0x15c) returned 0x1 [0170.819] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x1d [0170.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dcc0) returned 1 [0170.819] CreateFileW (lpFileName="C:\\Users\\Public\\SYMMYWARE.TXT" (normalized: "c:\\users\\public\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0170.820] GetFileType (hFile=0x15c) returned 0x1 [0170.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dc30) returned 1 [0170.820] GetFileType (hFile=0x15c) returned 0x1 [0170.821] GetFullPathNameW (in: lpFileName="C:\\Users\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x16 [0170.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12dd40) returned 1 [0170.821] CreateFileW (lpFileName="C:\\Users\\SYMMYWARE.TXT" (normalized: "c:\\users\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0170.822] GetFileType (hFile=0x15c) returned 0x1 [0170.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dcb0) returned 1 [0170.822] GetFileType (hFile=0x15c) returned 0x1 [0170.823] GetFullPathNameW (in: lpFileName="C:\\SYMMYWARE.TXT", nBufferLength=0x105, lpBuffer=0x12d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\SYMMYWARE.TXT", lpFilePart=0x0) returned 0x10 [0170.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ddc0) returned 1 [0170.824] CreateFileW (lpFileName="C:\\SYMMYWARE.TXT" (normalized: "c:\\symmyware.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x15c [0170.824] GetFileType (hFile=0x15c) returned 0x1 [0170.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12dd30) returned 1 [0170.824] GetFileType (hFile=0x15c) returned 0x1 [0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x12d610, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0171.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x12d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0171.242] GetCurrentProcess () returned 0xffffffffffffffff [0171.242] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d8f8 | out: TokenHandle=0x12d8f8*=0x340) returned 1 [0171.247] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x12d320, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0171.252] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12d9b0 | out: lpFileInformation=0x12d9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0171.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0171.256] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12d998 | out: lpFileInformation=0x12d998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0171.257] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0171.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12d810) returned 1 [0171.257] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x350 [0171.258] GetFileType (hFile=0x350) returned 0x1 [0171.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12d780) returned 1 [0171.258] GetFileType (hFile=0x350) returned 0x1 [0171.286] GetFileSize (in: hFile=0x350, lpFileSizeHigh=0x12d8e8 | out: lpFileSizeHigh=0x12d8e8*=0x0) returned 0x8c8f [0171.287] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d858, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d858*=0x1000, lpOverlapped=0x0) returned 1 [0171.302] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d638, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d638*=0x1000, lpOverlapped=0x0) returned 1 [0171.303] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d428, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d428*=0x1000, lpOverlapped=0x0) returned 1 [0171.304] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d428, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d428*=0x1000, lpOverlapped=0x0) returned 1 [0171.304] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d428, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d428*=0x1000, lpOverlapped=0x0) returned 1 [0171.305] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d2e8, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d2e8*=0x1000, lpOverlapped=0x0) returned 1 [0171.308] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d528, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d528*=0x1000, lpOverlapped=0x0) returned 1 [0171.314] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d3d8, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d3d8*=0x1000, lpOverlapped=0x0) returned 1 [0171.314] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d3d8, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d3d8*=0xc8f, lpOverlapped=0x0) returned 1 [0171.314] ReadFile (in: hFile=0x350, lpBuffer=0x26dd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12d4f8, lpOverlapped=0x0 | out: lpBuffer=0x26dd878*, lpNumberOfBytesRead=0x12d4f8*=0x0, lpOverlapped=0x0) returned 1 [0171.315] CloseHandle (hObject=0x350) returned 1 [0171.316] GetCurrentProcess () returned 0xffffffffffffffff [0171.316] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12db18 | out: TokenHandle=0x12db18*=0x350) returned 1 [0171.317] GetCurrentProcess () returned 0xffffffffffffffff [0171.317] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12db18 | out: TokenHandle=0x12db18*=0x354) returned 1 [0171.319] GetCurrentProcess () returned 0xffffffffffffffff [0171.319] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d8f8 | out: TokenHandle=0x12d8f8*=0x358) returned 1 [0171.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x12d9b0 | out: lpFileInformation=0x12d9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0171.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x12d330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0171.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x12d998 | out: lpFileInformation=0x12d998*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0171.321] GetCurrentProcess () returned 0xffffffffffffffff [0171.321] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12db18 | out: TokenHandle=0x12db18*=0x35c) returned 1 [0171.322] GetCurrentProcess () returned 0xffffffffffffffff [0171.322] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12db18 | out: TokenHandle=0x12db18*=0x360) returned 1 [0171.331] GetCurrentProcess () returned 0xffffffffffffffff [0171.331] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d868 | out: TokenHandle=0x12d868*=0x364) returned 1 [0171.372] GetCurrentProcess () returned 0xffffffffffffffff [0171.372] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d878 | out: TokenHandle=0x12d878*=0x368) returned 1 [0171.386] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x36c [0171.386] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x370 [0171.397] GetCurrentProcess () returned 0xffffffffffffffff [0171.397] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d898 | out: TokenHandle=0x12d898*=0x374) returned 1 [0171.400] GetCurrentProcess () returned 0xffffffffffffffff [0171.401] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d8a8 | out: TokenHandle=0x12d8a8*=0x378) returned 1 [0171.405] QueryPerformanceFrequency (in: lpFrequency=0x7fe93e26830 | out: lpFrequency=0x7fe93e26830*=100000000) returned 1 [0171.405] QueryPerformanceCounter (in: lpPerformanceCount=0x12df18 | out: lpPerformanceCount=0x12df18*=29004477992) returned 1 [0171.408] GetCurrentProcess () returned 0xffffffffffffffff [0171.408] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d798 | out: TokenHandle=0x12d798*=0x37c) returned 1 [0171.412] GetCurrentProcess () returned 0xffffffffffffffff [0171.413] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d7a8 | out: TokenHandle=0x12d7a8*=0x380) returned 1 [0171.422] GetCurrentProcess () returned 0xffffffffffffffff [0171.422] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d808 | out: TokenHandle=0x12d808*=0x384) returned 1 [0171.424] GetCurrentProcess () returned 0xffffffffffffffff [0171.424] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d818 | out: TokenHandle=0x12d818*=0x388) returned 1 [0171.428] GetCurrentProcess () returned 0xffffffffffffffff [0171.428] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12dce8 | out: TokenHandle=0x12dce8*=0x38c) returned 1 [0171.433] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x12bd08 | out: phkResult=0x12bd08*=0x390) returned 0x0 [0171.433] RegQueryValueExW (in: hKey=0x390, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12bd58, lpData=0x0, lpcbData=0x12bd50*=0x0 | out: lpType=0x12bd58*=0x1, lpData=0x0, lpcbData=0x12bd50*=0xe) returned 0x0 [0171.434] RegQueryValueExW (in: hKey=0x390, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12bd58, lpData=0x270d3c8, lpcbData=0x12bd50*=0xe | out: lpType=0x12bd58*=0x1, lpData="Client", lpcbData=0x12bd50*=0xe) returned 0x0 [0171.434] RegCloseKey (hKey=0x390) returned 0x0 [0171.451] CoTaskMemAlloc (cb=0xcd0) returned 0x102c4a0 [0171.453] RasEnumConnectionsW (in: param_1=0x102c4a0, param_2=0x12dc90, param_3=0x12dc98 | out: param_1=0x102c4a0, param_2=0x12dc90, param_3=0x12dc98) returned 0x0 [0171.465] CoTaskMemFree (pv=0x102c4a0) [0171.468] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x12d9d8 | out: lpWSAData=0x12d9d8) returned 0 [0171.478] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3d0 [0171.486] setsockopt (s=0x3d0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0171.486] closesocket (s=0x3d0) returned 0 [0171.486] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3d0 [0171.489] setsockopt (s=0x3d0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0171.489] closesocket (s=0x3d0) returned 0 [0171.490] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3d0 [0171.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d4 [0171.492] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x12dcb8 | out: argp=0x12dcb8) returned 0 [0171.492] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3d8 [0171.492] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3dc [0171.492] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x12dcb8 | out: argp=0x12dcb8) returned 0 [0171.493] WSAIoctl (in: s=0x3d0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12dc40, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12dc40, lpOverlapped=0x0) returned -1 [0171.494] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12d820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0171.496] WSAEventSelect (s=0x3d0, hEventObject=0x3d4, lNetworkEvents=512) returned 0 [0171.496] WSAIoctl (in: s=0x3d8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12dc40, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12dc40, lpOverlapped=0x0) returned -1 [0171.496] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12d820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0171.496] WSAEventSelect (s=0x3d8, hEventObject=0x3dc, lNetworkEvents=512) returned 0 [0171.496] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3e0 [0171.497] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x3e0, param_3=0x3) returned 0x0 [0171.503] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x12dd28 | out: phkResult=0x12dd28*=0x3f8) returned 0x0 [0171.504] RegOpenKeyExW (in: hKey=0x3f8, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12dc68 | out: phkResult=0x12dc68*=0x3fc) returned 0x0 [0171.504] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x404 [0171.505] RegNotifyChangeKeyValue (hKey=0x3fc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x404, fAsynchronous=1) returned 0x0 [0171.506] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12dc70 | out: phkResult=0x12dc70*=0x408) returned 0x0 [0171.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x40c [0171.506] RegNotifyChangeKeyValue (hKey=0x408, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x40c, fAsynchronous=1) returned 0x0 [0171.506] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x12dc70 | out: phkResult=0x12dc70*=0x410) returned 0x0 [0171.507] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x414 [0171.507] RegNotifyChangeKeyValue (hKey=0x410, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x414, fAsynchronous=1) returned 0x0 [0171.508] GetCurrentProcess () returned 0xffffffffffffffff [0171.508] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12dbf8 | out: TokenHandle=0x12dbf8*=0x418) returned 1 [0171.516] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x12cd48 | out: phkResult=0x12cd48*=0x42c) returned 0x0 [0171.516] RegQueryValueExW (in: hKey=0x42c, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x12cd88, lpData=0x0, lpcbData=0x12cd80*=0x0 | out: lpType=0x12cd88*=0x0, lpData=0x0, lpcbData=0x12cd80*=0x0) returned 0x2 [0171.516] RegCloseKey (hKey=0x42c) returned 0x0 [0171.522] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0xfe1930 [0171.535] WinHttpSetTimeouts (hInternet=0xfe1930, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0171.536] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x12dc70 | out: pProxyConfig=0x12dc70) returned 1 [0171.601] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x12cc80, nSize=0x100 | out: lpBuffer="") returned 0x0 [0171.601] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x12cc80, nSize=0x100 | out: lpBuffer="") returned 0x0 [0171.605] EtwEventRegister (in: ProviderId=0x27110e8, EnableCallback=0x1ae814ac, CallbackContext=0x0, RegHandle=0x27110c8 | out: RegHandle=0x27110c8) returned 0x0 [0171.644] GetCurrentProcess () returned 0xffffffffffffffff [0171.644] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d768 | out: TokenHandle=0x12d768*=0x460) returned 1 [0171.645] GetCurrentProcess () returned 0xffffffffffffffff [0171.645] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d778 | out: TokenHandle=0x12d778*=0x45c) returned 1 [0171.649] SetEvent (hEvent=0x36c) returned 1 [0171.667] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12da60*=0x3e0, lpdwindex=0x12d834 | out: lpdwindex=0x12d834) returned 0x80010115 [0171.729] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0171.729] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0171.738] GetWindowPlacement (in: hWnd=0x2026c, lpwndpl=0x12c838 | out: lpwndpl=0x12c838) returned 1 [0171.739] GetClientRect (in: hWnd=0x2026c, lpRect=0x12c750 | out: lpRect=0x12c750) returned 1 [0171.739] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0171.739] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0171.739] GetSystemMetrics (nIndex=42) returned 0 [0171.739] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12c4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0171.739] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12c4c0) returned 0x5 [0171.739] GetClientRect (in: hWnd=0x2026c, lpRect=0x12c538 | out: lpRect=0x12c538) returned 1 [0171.740] GetCurrentObject (hdc=0x20109b2, type=0x1) returned 0x1b00017 [0171.740] GetCurrentObject (hdc=0x20109b2, type=0x2) returned 0x1900010 [0171.740] GetCurrentObject (hdc=0x20109b2, type=0x7) returned 0xd0509c0 [0171.740] GetCurrentObject (hdc=0x20109b2, type=0x6) returned 0x18a002e [0171.740] SaveDC (hdc=0x20109b2) returned 1 [0171.740] GetNearestColor (hdc=0x20109b2, color=0xf0f0f0) returned 0xf0f0f0 [0171.740] CreateSolidBrush (color=0xf0f0f0) returned 0x141009ab [0171.740] FillRect (hDC=0x20109b2, lprc=0x12c228, hbr=0x141009ab) returned 1 [0171.740] DeleteObject (ho=0x141009ab) returned 1 [0171.741] RestoreDC (hdc=0x20109b2, nSavedDC=-1) returned 1 [0171.742] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0xc0c3, wParam=0x0, lParam=0x0) returned 0x0 [0171.742] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xc0c3, wParam=0x0, lParam=0x0) returned 0x0 [0171.742] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0xc0c3, wParam=0x0, lParam=0x0) returned 0x0 [0171.742] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.742] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.743] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x12d0f8, fWinIni=0x0 | out: pvParam=0x12d0f8) returned 1 [0171.745] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1035680 [0171.746] PostMessageW (hWnd=0x20298, Msg=0x201a, wParam=0x18, lParam=0x1035680) returned 1 [0171.746] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.746] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.746] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.746] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x12d0f8, fWinIni=0x0 | out: pvParam=0x12d0f8) returned 1 [0171.746] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x10356a0 [0171.746] PostMessageW (hWnd=0x20298, Msg=0x201a, wParam=0x18, lParam=0x10356a0) returned 1 [0171.746] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x1a, wParam=0x18, lParam=0x12d558) returned 0x0 [0171.749] BeginPaint (in: hWnd=0x2026c, lpPaint=0x12ce88 | out: lpPaint=0x12ce88) returned 0x20109b2 [0171.750] GdipCreateHalftonePalette () returned 0x4c080786 [0171.751] SelectPalette (hdc=0x20109b2, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0171.751] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0171.751] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0171.751] GetSystemMetrics (nIndex=42) returned 0 [0171.751] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12cd30, nMaxCount=6 | out: lpString="Form1") returned 5 [0171.751] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12cd30) returned 0x5 [0171.751] SelectPalette (hdc=0x20109b2, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0171.751] EndPaint (hWnd=0x2026c, lpPaint=0x12ce28) returned 1 [0171.752] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12da00*=0x3d4, lpdwindex=0x12d7d4 | out: lpdwindex=0x12d7d4) returned 0x80010115 [0171.753] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12da00*=0x3dc, lpdwindex=0x12d7d4 | out: lpdwindex=0x12d7d4) returned 0x80010115 [0171.753] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12dae0*=0x404, lpdwindex=0x12d8b4 | out: lpdwindex=0x12d8b4) returned 0x80010115 [0171.753] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12dae0*=0x40c, lpdwindex=0x12d8b4 | out: lpdwindex=0x12d8b4) returned 0x80010115 [0171.753] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12dae0*=0x414, lpdwindex=0x12d8b4 | out: lpdwindex=0x12d8b4) returned 0x80010115 [0171.755] WinHttpGetProxyForUrl (in: hSession=0xfe1930, lpcwszUrl="https://www.google.com/", pAutoProxyOptions=0x12db40, pProxyInfo=0x12dc10 | out: pProxyInfo=0x12dc10) returned 0 [0174.790] GetCurrentProcess () returned 0xffffffffffffffff [0174.790] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d718 | out: TokenHandle=0x12d718*=0x494) returned 1 [0174.793] GetCurrentProcess () returned 0xffffffffffffffff [0174.793] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d728 | out: TokenHandle=0x12d728*=0x49c) returned 1 [0174.795] GetTimeZoneInformation (in: lpTimeZoneInformation=0x12daa0 | out: lpTimeZoneInformation=0x12daa0) returned 0x1 [0174.799] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x12d8a8 | out: pTimeZoneInformation=0x12d8a8) returned 0x1 [0174.801] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d878 | out: phkResult=0x12d878*=0x4a0) returned 0x0 [0174.803] RegQueryValueExW (in: hKey=0x4a0, lpValueName="TZI", lpReserved=0x0, lpType=0x12d8b8, lpData=0x0, lpcbData=0x12d8b0*=0x0 | out: lpType=0x12d8b8*=0x3, lpData=0x0, lpcbData=0x12d8b0*=0x2c) returned 0x0 [0174.803] RegQueryValueExW (in: hKey=0x4a0, lpValueName="TZI", lpReserved=0x0, lpType=0x12d8b8, lpData=0x2716d08, lpcbData=0x12d8b0*=0x2c | out: lpType=0x12d8b8*=0x3, lpData=0x2716d08*, lpcbData=0x12d8b0*=0x2c) returned 0x0 [0174.804] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d678 | out: phkResult=0x12d678*=0x4a4) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x12d6b8, lpData=0x0, lpcbData=0x12d6b0*=0x0 | out: lpType=0x12d6b8*=0x4, lpData=0x0, lpcbData=0x12d6b0*=0x4) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x12d6b8, lpData=0x12d698, lpcbData=0x12d6b0*=0x4 | out: lpType=0x12d6b8*=0x4, lpData=0x12d698*=0x7d7, lpcbData=0x12d6b0*=0x4) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="LastEntry", lpReserved=0x0, lpType=0x12d6b8, lpData=0x0, lpcbData=0x12d6b0*=0x0 | out: lpType=0x12d6b8*=0x4, lpData=0x0, lpcbData=0x12d6b0*=0x4) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="LastEntry", lpReserved=0x0, lpType=0x12d6b8, lpData=0x12d698, lpcbData=0x12d6b0*=0x4 | out: lpType=0x12d6b8*=0x4, lpData=0x12d698*=0x7d8, lpcbData=0x12d6b0*=0x4) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="2007", lpReserved=0x0, lpType=0x12d6b8, lpData=0x0, lpcbData=0x12d6b0*=0x0 | out: lpType=0x12d6b8*=0x3, lpData=0x0, lpcbData=0x12d6b0*=0x2c) returned 0x0 [0174.804] RegQueryValueExW (in: hKey=0x4a4, lpValueName="2007", lpReserved=0x0, lpType=0x12d6b8, lpData=0x2717288, lpcbData=0x12d6b0*=0x2c | out: lpType=0x12d6b8*=0x3, lpData=0x2717288*, lpcbData=0x12d6b0*=0x2c) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a4, lpValueName="2008", lpReserved=0x0, lpType=0x12d6b8, lpData=0x0, lpcbData=0x12d6b0*=0x0 | out: lpType=0x12d6b8*=0x3, lpData=0x0, lpcbData=0x12d6b0*=0x2c) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a4, lpValueName="2008", lpReserved=0x0, lpType=0x12d6b8, lpData=0x2717390, lpcbData=0x12d6b0*=0x2c | out: lpType=0x12d6b8*=0x3, lpData=0x2717390*, lpcbData=0x12d6b0*=0x2c) returned 0x0 [0174.805] RegCloseKey (hKey=0x4a4) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x12d848, lpData=0x0, lpcbData=0x12d840*=0x0 | out: lpType=0x12d848*=0x1, lpData=0x0, lpcbData=0x12d840*=0x20) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x12d848, lpData=0x2717560, lpcbData=0x12d840*=0x20 | out: lpType=0x12d848*=0x1, lpData="@tzres.dll,-670", lpcbData=0x12d840*=0x20) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x12d848, lpData=0x0, lpcbData=0x12d840*=0x0 | out: lpType=0x12d848*=0x1, lpData=0x0, lpcbData=0x12d840*=0x20) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x12d848, lpData=0x27175d0, lpcbData=0x12d840*=0x20 | out: lpType=0x12d848*=0x1, lpData="@tzres.dll,-672", lpcbData=0x12d840*=0x20) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x12d848, lpData=0x0, lpcbData=0x12d840*=0x0 | out: lpType=0x12d848*=0x1, lpData=0x0, lpcbData=0x12d840*=0x20) returned 0x0 [0174.805] RegQueryValueExW (in: hKey=0x4a0, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x12d848, lpData=0x2717640, lpcbData=0x12d840*=0x20 | out: lpType=0x12d848*=0x1, lpData="@tzres.dll,-671", lpcbData=0x12d840*=0x20) returned 0x0 [0174.806] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.806] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xfeb320 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0174.808] CoTaskMemFree (pv=0xfeb320) [0174.808] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.808] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath=0xfeb320, pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890 | out: pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890) returned 1 [0174.811] CoTaskMemFree (pv=0x0) [0174.811] CoTaskMemFree (pv=0xfeb320) [0174.811] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xbb0001 [0174.816] CoTaskMemAlloc (cb=0x3ec) returned 0x1cb068b0 [0174.816] LoadStringW (in: hInstance=0xbb0001, uID=0x29e, lpBuffer=0x1cb068b0, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0174.817] CoTaskMemFree (pv=0x1cb068b0) [0174.817] FreeLibrary (hLibModule=0xbb0001) returned 1 [0174.818] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.818] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xfeb320 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0174.819] CoTaskMemFree (pv=0xfeb320) [0174.819] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.819] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath=0xfeb320, pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890 | out: pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890) returned 1 [0174.819] CoTaskMemFree (pv=0x0) [0174.819] CoTaskMemFree (pv=0xfeb320) [0174.819] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xbb0001 [0174.820] CoTaskMemAlloc (cb=0x3ec) returned 0x1cb068b0 [0174.820] LoadStringW (in: hInstance=0xbb0001, uID=0x2a0, lpBuffer=0x1cb068b0, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0174.820] CoTaskMemFree (pv=0x1cb068b0) [0174.820] FreeLibrary (hLibModule=0xbb0001) returned 1 [0174.821] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.821] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xfeb320 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0174.821] CoTaskMemFree (pv=0xfeb320) [0174.821] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.821] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath=0xfeb320, pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890 | out: pwszLanguage=0x0, pcchLanguage=0x12d898, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x12d8a0, pululEnumerator=0x12d890) returned 1 [0174.822] CoTaskMemFree (pv=0x0) [0174.822] CoTaskMemFree (pv=0xfeb320) [0174.822] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0xbb0001 [0174.823] CoTaskMemAlloc (cb=0x3ec) returned 0x1cb068b0 [0174.823] LoadStringW (in: hInstance=0xbb0001, uID=0x29f, lpBuffer=0x1cb068b0, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0174.823] CoTaskMemFree (pv=0x1cb068b0) [0174.823] FreeLibrary (hLibModule=0xbb0001) returned 1 [0174.824] RegCloseKey (hKey=0x4a0) returned 0x0 [0174.826] SetEvent (hEvent=0x36c) returned 1 [0174.837] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x12dc58 | out: pFixedInfo=0x0, pOutBufLen=0x12dc58) returned 0x6f [0174.857] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1cb068b0 [0174.858] GetNetworkParams (in: pFixedInfo=0x1cb068b0, pOutBufLen=0x12dc58 | out: pFixedInfo=0x1cb068b0, pOutBufLen=0x12dc58) returned 0x0 [0174.870] LocalFree (hMem=0x1cb068b0) returned 0x0 [0174.872] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.872] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0xfeb320, nSize=0x104 | out: lpBuffer="￿??\\C:\\Windows\\system32\\DNSAPI.dll") returned 0x0 [0174.872] CoTaskMemFree (pv=0xfeb320) [0174.872] CoTaskMemAlloc (cb=0x20c) returned 0xfeb320 [0174.872] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0xfeb320, nSize=0x104 | out: lpBuffer="￿??\\C:\\Windows\\system32\\DNSAPI.dll") returned 0x0 [0174.872] CoTaskMemFree (pv=0xfeb320) [0174.886] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4b4 [0174.888] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4b0 [0174.889] GetAddrInfoW (in: pNodeName="www.google.com", pServiceName=0x0, pHints=0x12dae8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x12da30 | out: ppResult=0x12da30*=0xbc58b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0xbc58f0*(sa_family=2, sin_port=0x0, sin_addr="172.217.16.164"), ai_next=0x0)) returned 0 [0174.906] FreeAddrInfoW (pAddrInfo=0xbc58b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0xbc58f0*(sa_family=2, sin_port=0x0, sin_addr="172.217.16.164"), ai_next=0x0)) [0174.909] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4bc [0174.909] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c8 [0174.909] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x12da58 | out: argp=0x12da58) returned 0 [0174.909] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4cc [0174.910] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d0 [0174.910] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x12da58 | out: argp=0x12da58) returned 0 [0174.910] WSAIoctl (in: s=0x4bc, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d9e0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d9e0, lpOverlapped=0x0) returned -1 [0174.910] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12d5c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0174.911] WSAEventSelect (s=0x4bc, hEventObject=0x4c8, lNetworkEvents=512) returned 0 [0174.911] WSAIoctl (in: s=0x4cc, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12d9e0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12d9e0, lpOverlapped=0x0) returned -1 [0174.911] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12d5c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0174.911] WSAEventSelect (s=0x4cc, hEventObject=0x4d0, lNetworkEvents=512) returned 0 [0174.911] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x12da48*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x12da48*=0xbf0) returned 0x6f [0174.917] LocalAlloc (uFlags=0x0, uBytes=0xbf0) returned 0x1cb0e0c0 [0174.917] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1cb0e0c0, SizePointer=0x12da48*=0xbf0 | out: AdapterAddresses=0x1cb0e0c0*(Alignment=0xe000001c0, Length=0x1c0, IfIndex=0xe, Next=0x1cb0e3f0, AdapterName="{208C2C2F-ECA0-4B34-8C2D-83B1FBC25E0D}", FirstUnicastAddress=0x1cb0e340, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) PRO/1000 MT Network Connection #2", FriendlyName="Local Area Connection 2", PhysicalAddress=([0]=0x0, [1]=0x24, [2]=0xa, [3]=0xd2, [4]=0x73, [5]=0xa7, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0xe, ZoneIndices=([0]=0xe, [1]=0xe, [2]=0xe, [3]=0xe, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6000007000000, Dhcpv4Server.lpSockaddr=0x1cb0e280*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x20, [5]=0xc7, [6]=0x5c, [7]=0xa7, [8]=0xc4, [9]=0x3d, [10]=0xc7, [11]=0x58, [12]=0x4a, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x11c43dc7, FirstDnsSuffix=0x0), SizePointer=0x12da48*=0xbf0) returned 0x0 [0174.926] LocalFree (hMem=0x1cb0e0c0) returned 0x0 [0174.928] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x12da28 | out: phkResult=0x12da28*=0x4d4) returned 0x0 [0174.928] RegQueryValueExW (in: hKey=0x4d4, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x12da68, lpData=0x0, lpcbData=0x12da60*=0x0 | out: lpType=0x12da68*=0x0, lpData=0x0, lpcbData=0x12da60*=0x0) returned 0x2 [0174.929] RegCloseKey (hKey=0x4d4) returned 0x0 [0174.930] WSAConnect (in: s=0x4b4, name=0x2725758*(sa_family=2, sin_port=0x1bb, sin_addr="172.217.16.164"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0174.953] closesocket (s=0x4b0) returned 0 [0174.983] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x12aaa8 | out: phkResult=0x12aaa8*=0x0) returned 0x2 [0174.988] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d858 | out: phkResult=0x12d858*=0x4b0) returned 0x0 [0174.988] RegQueryValueExW (in: hKey=0x4b0, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x12d898, lpData=0x0, lpcbData=0x12d890*=0x0 | out: lpType=0x12d898*=0x0, lpData=0x0, lpcbData=0x12d890*=0x0) returned 0x2 [0174.988] RegCloseKey (hKey=0x4b0) returned 0x0 [0174.994] EnumerateSecurityPackagesW (in: pcPackages=0x12d898, ppPackageInfo=0x12d7b0 | out: pcPackages=0x12d898, ppPackageInfo=0x12d7b0) returned 0x0 [0175.001] FreeContextBuffer (in: pvContextBuffer=0x1cb068b0 | out: pvContextBuffer=0x1cb068b0) returned 0x0 [0175.006] GetCurrentProcess () returned 0xffffffffffffffff [0175.006] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d3e8 | out: TokenHandle=0x12d3e8*=0x4b0) returned 1 [0175.008] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x27288c4, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x12d550, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x272a960, ptsExpiry=0x12d470 | out: phCredential=0x272a960, ptsExpiry=0x12d470) returned 0x0 [0175.344] InitializeSecurityContextW (in: phCredential=0x12d448, phContext=0x0, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272ab70, pfContextAttr=0x2728890, ptsExpiry=0x12d440 | out: phNewContext=0x272ac18, pOutput=0x272ab70, pfContextAttr=0x2728890, ptsExpiry=0x12d440) returned 0x90312 [0175.346] FreeContextBuffer (in: pvContextBuffer=0xfa8930 | out: pvContextBuffer=0xfa8930) returned 0x0 [0175.349] send (s=0x4b4, buf=0x272ac40*, len=118, flags=0) returned 118 [0175.351] recv (in: s=0x4b4, buf=0x272ac40, len=5, flags=0 | out: buf=0x272ac40*) returned 5 [0175.376] recv (in: s=0x4b4, buf=0x272ac45, len=87, flags=0 | out: buf=0x272ac45*) returned 87 [0175.378] InitializeSecurityContextW (in: phCredential=0x12d3a8, phContext=0x12d4d0, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272af50, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272af70, pfContextAttr=0x2728890, ptsExpiry=0x12d3a0 | out: phNewContext=0x272ac18, pOutput=0x272af70, pfContextAttr=0x2728890, ptsExpiry=0x12d3a0) returned 0x90312 [0175.379] recv (in: s=0x4b4, buf=0x272b060, len=5, flags=0 | out: buf=0x272b060*) returned 5 [0175.379] recv (in: s=0x4b4, buf=0x272b085, len=2344, flags=0 | out: buf=0x272b085*) returned 2344 [0175.379] InitializeSecurityContextW (in: phCredential=0x12d2f8, phContext=0x12d420, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272ba78, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272ba98, pfContextAttr=0x2728890, ptsExpiry=0x12d2f0 | out: phNewContext=0x272ac18, pOutput=0x272ba98, pfContextAttr=0x2728890, ptsExpiry=0x12d2f0) returned 0x90312 [0175.380] recv (in: s=0x4b4, buf=0x272bb88, len=5, flags=0 | out: buf=0x272bb88*) returned 5 [0175.380] recv (in: s=0x4b4, buf=0x272bbad, len=146, flags=0 | out: buf=0x272bbad*) returned 146 [0175.380] InitializeSecurityContextW (in: phCredential=0x12d248, phContext=0x12d370, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272bd08, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272bd28, pfContextAttr=0x2728890, ptsExpiry=0x12d240 | out: phNewContext=0x272ac18, pOutput=0x272bd28, pfContextAttr=0x2728890, ptsExpiry=0x12d240) returned 0x90312 [0175.380] recv (in: s=0x4b4, buf=0x272be18, len=5, flags=0 | out: buf=0x272be18*) returned 5 [0175.381] recv (in: s=0x4b4, buf=0x272be3d, len=4, flags=0 | out: buf=0x272be3d*) returned 4 [0175.381] InitializeSecurityContextW (in: phCredential=0x12d198, phContext=0x12d2c0, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272bf10, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272bf30, pfContextAttr=0x2728890, ptsExpiry=0x12d190 | out: phNewContext=0x272ac18, pOutput=0x272bf30, pfContextAttr=0x2728890, ptsExpiry=0x12d190) returned 0x90312 [0175.434] FreeContextBuffer (in: pvContextBuffer=0xfec520 | out: pvContextBuffer=0xfec520) returned 0x0 [0175.434] send (s=0x4b4, buf=0x272c000*, len=134, flags=0) returned 134 [0175.435] recv (in: s=0x4b4, buf=0x272c000, len=5, flags=0 | out: buf=0x272c000*) returned 5 [0175.450] recv (in: s=0x4b4, buf=0x272c005, len=1, flags=0 | out: buf=0x272c005*) returned 1 [0175.450] InitializeSecurityContextW (in: phCredential=0x12d0e8, phContext=0x12d210, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272c170, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272c190, pfContextAttr=0x2728890, ptsExpiry=0x12d0e0 | out: phNewContext=0x272ac18, pOutput=0x272c190, pfContextAttr=0x2728890, ptsExpiry=0x12d0e0) returned 0x90312 [0175.450] recv (in: s=0x4b4, buf=0x272c280, len=5, flags=0 | out: buf=0x272c280*) returned 5 [0175.450] recv (in: s=0x4b4, buf=0x272c2a5, len=48, flags=0 | out: buf=0x272c2a5*) returned 48 [0175.450] InitializeSecurityContextW (in: phCredential=0x12d038, phContext=0x12d160, pTargetName=0x27258ac, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x272c3a0, Reserved2=0x0, phNewContext=0x272ac18, pOutput=0x272c3c0, pfContextAttr=0x2728890, ptsExpiry=0x12d030 | out: phNewContext=0x272ac18, pOutput=0x272c3c0, pfContextAttr=0x2728890, ptsExpiry=0x12d030) returned 0x0 [0175.997] QueryContextAttributesW (in: phContext=0x272ac18, ulAttribute=0x4, pBuffer=0x272c4e8 | out: pBuffer=0x272c4e8) returned 0x0 [0175.997] QueryContextAttributesW (in: phContext=0x272ac18, ulAttribute=0x5a, pBuffer=0x272c578 | out: pBuffer=0x272c578) returned 0x0 [0176.001] QueryContextAttributesW (in: phContext=0x272ac18, ulAttribute=0x53, pBuffer=0x272c8d8 | out: pBuffer=0x272c8d8) returned 0x0 [0176.011] CertDuplicateCRLContext (pCrlContext=0x1018ac0) returned 0x1018ac0 [0176.012] CertDuplicateStore (hCertStore=0xfa9a30) returned 0xfa9a30 [0176.013] CertEnumCertificatesInStore (hCertStore=0xfa9a30, pPrevCertContext=0x0) returned 0x1018b40 [0176.013] CertDuplicateCRLContext (pCrlContext=0x1018b40) returned 0x1018b40 [0176.014] CertEnumCertificatesInStore (hCertStore=0xfa9a30, pPrevCertContext=0x1018b40) returned 0x1018ac0 [0176.014] CertDuplicateCRLContext (pCrlContext=0x1018ac0) returned 0x1018ac0 [0176.014] CertEnumCertificatesInStore (hCertStore=0xfa9a30, pPrevCertContext=0x1018ac0) returned 0x0 [0176.014] CertCloseStore (hCertStore=0xfa9a30, dwFlags=0x0) returned 1 [0176.014] CertFreeCRLContext (pCrlContext=0x1018ac0) returned 1 [0176.026] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0xfa9b00 [0176.026] CertAddCRLLinkToStore (in: hCertStore=0xfa9b00, pCrlContext=0x1018b40, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0176.028] CertAddCRLLinkToStore (in: hCertStore=0xfa9b00, pCrlContext=0x1018ac0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0176.035] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1018ac0, pTime=0x12d150, hAdditionalStore=0xfa9b00, pChainPara=0x12cfe8, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x12cfd0 | out: ppChainContext=0x12cfd0) returned 1 [0176.376] CertDuplicateCertificateChain (pChainContext=0x1cc187c0) returned 0x1cc187c0 [0176.377] CertDuplicateCRLContext (pCrlContext=0x1018ac0) returned 0x1018ac0 [0176.377] CertDuplicateCRLContext (pCrlContext=0x1cc55100) returned 0x1cc55100 [0176.377] CertDuplicateCRLContext (pCrlContext=0x1cc55180) returned 0x1cc55180 [0176.377] CertFreeCertificateChain (pChainContext=0x1cc187c0) [0176.378] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1cc187c0, pPolicyPara=0x12d298, pPolicyStatus=0x12d278 | out: pPolicyStatus=0x12d278) returned 1 [0176.379] SetLastError (dwErrCode=0x0) [0176.381] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1cc187c0, pPolicyPara=0x12d378, pPolicyStatus=0x12d2c8 | out: pPolicyStatus=0x12d2c8) returned 1 [0176.385] CertFreeCertificateChain (pChainContext=0x1cc187c0) [0176.385] CertFreeCRLContext (pCrlContext=0x1018ac0) returned 1 [0176.389] CoTaskMemAlloc (cb=0x20c) returned 0x106c760 [0176.389] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x106c760, nSize=0x104 | out: lpBuffer="Š") returned 0x0 [0176.389] CoTaskMemFree (pv=0x106c760) [0176.389] CoTaskMemAlloc (cb=0x20c) returned 0x106c760 [0176.389] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x106c760, nSize=0x104 | out: lpBuffer="Š") returned 0x0 [0176.390] CoTaskMemFree (pv=0x106c760) [0176.390] CoTaskMemAlloc (cb=0x20c) returned 0x106c760 [0176.390] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x106c760, nSize=0x104 | out: lpBuffer="Š") returned 0x0 [0176.390] CoTaskMemFree (pv=0x106c760) [0176.390] CoTaskMemAlloc (cb=0x20c) returned 0x106c760 [0176.390] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x106c760, nSize=0x104 | out: lpBuffer="Š") returned 0x0 [0176.390] CoTaskMemFree (pv=0x106c760) [0176.414] EncryptMessage (in: phContext=0x272ac18, fQOP=0x0, pMessage=0x2735fc8, MessageSeqNo=0x0 | out: pMessage=0x2735fc8) returned 0x0 [0176.414] send (s=0x4b4, buf=0x2734a00*, len=101, flags=0) returned 101 [0176.420] setsockopt (s=0x4b4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0176.422] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.482] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.484] DecryptMessage (in: phContext=0x272ac18, pMessage=0x27464e8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x27464e8, pfQOP=0x0) returned 0x0 [0176.513] GetCurrentProcess () returned 0xffffffffffffffff [0176.513] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d858 | out: TokenHandle=0x12d858*=0x45c) returned 1 [0176.514] GetCurrentProcess () returned 0xffffffffffffffff [0176.514] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x12d868 | out: TokenHandle=0x12d868*=0x494) returned 1 [0176.517] setsockopt (s=0x4b4, level=65535, optname=4102, optval="ô\x01", optlen=4) returned 0 [0176.518] QueryPerformanceCounter (in: lpPerformanceCount=0x12df08 | out: lpPerformanceCount=0x12df08*=29515698832) returned 1 [0176.518] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29515716728) returned 1 [0176.523] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.524] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.524] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274c8f8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274c8f8, pfQOP=0x0) returned 0x0 [0176.524] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516339494) returned 1 [0176.524] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.524] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.525] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274caf0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274caf0, pfQOP=0x0) returned 0x0 [0176.525] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516428007) returned 1 [0176.525] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.525] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.525] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274cce8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274cce8, pfQOP=0x0) returned 0x0 [0176.525] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516472166) returned 1 [0176.525] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.525] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.526] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274cee0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274cee0, pfQOP=0x0) returned 0x0 [0176.526] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516521673) returned 1 [0176.526] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.526] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.526] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274d0d8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274d0d8, pfQOP=0x0) returned 0x0 [0176.527] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516604677) returned 1 [0176.527] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.527] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.527] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274d2d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274d2d0, pfQOP=0x0) returned 0x0 [0176.527] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516644278) returned 1 [0176.527] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.527] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.527] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274d4c8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274d4c8, pfQOP=0x0) returned 0x0 [0176.527] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516687384) returned 1 [0176.528] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.528] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.528] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274d6c0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274d6c0, pfQOP=0x0) returned 0x0 [0176.528] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516722789) returned 1 [0176.528] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.528] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.528] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274d8b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274d8b8, pfQOP=0x0) returned 0x0 [0176.528] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516763192) returned 1 [0176.528] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.528] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.528] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274dab0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274dab0, pfQOP=0x0) returned 0x0 [0176.529] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516798134) returned 1 [0176.529] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.529] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.529] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274dca8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274dca8, pfQOP=0x0) returned 0x0 [0176.529] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516832631) returned 1 [0176.529] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.529] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.529] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274dea0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274dea0, pfQOP=0x0) returned 0x0 [0176.529] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516869917) returned 1 [0176.529] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.529] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.530] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274e098, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274e098, pfQOP=0x0) returned 0x0 [0176.530] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516916814) returned 1 [0176.530] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.530] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.530] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274e290, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274e290, pfQOP=0x0) returned 0x0 [0176.530] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516953841) returned 1 [0176.530] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.530] recv (in: s=0x4b4, buf=0x27423c5, len=720, flags=0 | out: buf=0x27423c5*) returned 720 [0176.530] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274e488, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274e488, pfQOP=0x0) returned 0x0 [0176.530] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29516990184) returned 1 [0176.531] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.531] recv (in: s=0x4b4, buf=0x27423c5, len=320, flags=0 | out: buf=0x27423c5*) returned 320 [0176.531] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274e680, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274e680, pfQOP=0x0) returned 0x0 [0176.531] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517046524) returned 1 [0176.531] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.531] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.531] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274e878, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274e878, pfQOP=0x0) returned 0x0 [0176.531] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517084015) returned 1 [0176.531] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.532] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.532] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274ea70, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274ea70, pfQOP=0x0) returned 0x0 [0176.532] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517115942) returned 1 [0176.532] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.532] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.532] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274ec68, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274ec68, pfQOP=0x0) returned 0x0 [0176.532] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517151387) returned 1 [0176.532] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.532] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.532] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274ee60, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274ee60, pfQOP=0x0) returned 0x0 [0176.532] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517183837) returned 1 [0176.532] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.533] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.533] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274f058, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274f058, pfQOP=0x0) returned 0x0 [0176.533] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517214593) returned 1 [0176.533] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.533] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.533] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274f250, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274f250, pfQOP=0x0) returned 0x0 [0176.533] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517245328) returned 1 [0176.533] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.533] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.533] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274f448, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274f448, pfQOP=0x0) returned 0x0 [0176.533] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517279313) returned 1 [0176.533] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.533] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.534] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274f640, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274f640, pfQOP=0x0) returned 0x0 [0176.534] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517310567) returned 1 [0176.534] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.534] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.534] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274f838, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274f838, pfQOP=0x0) returned 0x0 [0176.534] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517342676) returned 1 [0176.534] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.534] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.534] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274fa30, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274fa30, pfQOP=0x0) returned 0x0 [0176.534] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517376828) returned 1 [0176.534] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.534] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.535] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274fc28, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274fc28, pfQOP=0x0) returned 0x0 [0176.535] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517407808) returned 1 [0176.535] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.535] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.535] DecryptMessage (in: phContext=0x272ac18, pMessage=0x274fe20, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x274fe20, pfQOP=0x0) returned 0x0 [0176.535] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517439605) returned 1 [0176.535] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.535] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.535] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750018, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750018, pfQOP=0x0) returned 0x0 [0176.535] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517486450) returned 1 [0176.535] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.536] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.536] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750210, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750210, pfQOP=0x0) returned 0x0 [0176.536] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517517953) returned 1 [0176.536] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.536] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.536] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750408, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750408, pfQOP=0x0) returned 0x0 [0176.536] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517553768) returned 1 [0176.536] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.536] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.536] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750600, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750600, pfQOP=0x0) returned 0x0 [0176.536] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517586749) returned 1 [0176.536] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.537] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.537] DecryptMessage (in: phContext=0x272ac18, pMessage=0x27507f8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x27507f8, pfQOP=0x0) returned 0x0 [0176.537] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517617825) returned 1 [0176.537] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.537] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.537] DecryptMessage (in: phContext=0x272ac18, pMessage=0x27509f0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x27509f0, pfQOP=0x0) returned 0x0 [0176.537] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517652391) returned 1 [0176.537] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.537] recv (in: s=0x4b4, buf=0x27423c5, len=1424, flags=0 | out: buf=0x27423c5*) returned 1424 [0176.537] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750be8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750be8, pfQOP=0x0) returned 0x0 [0176.537] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517686401) returned 1 [0176.537] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.538] recv (in: s=0x4b4, buf=0x27423c5, len=560, flags=0 | out: buf=0x27423c5*) returned 560 [0176.538] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750de0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750de0, pfQOP=0x0) returned 0x0 [0176.538] QueryPerformanceCounter (in: lpPerformanceCount=0x12de98 | out: lpPerformanceCount=0x12de98*=29517718795) returned 1 [0176.538] recv (in: s=0x4b4, buf=0x27423c0, len=5, flags=0 | out: buf=0x27423c0*) returned 5 [0176.538] recv (in: s=0x4b4, buf=0x27423c5, len=32, flags=0 | out: buf=0x27423c5*) returned 32 [0176.538] DecryptMessage (in: phContext=0x272ac18, pMessage=0x2750fd8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2750fd8, pfQOP=0x0) returned 0x0 [0176.539] SetEvent (hEvent=0x36c) returned 1 [0176.539] QueryPerformanceCounter (in: lpPerformanceCount=0x12de78 | out: lpPerformanceCount=0x12de78*=29517876033) returned 1 [0176.557] QueryPerformanceCounter (in: lpPerformanceCount=0x12df38 | out: lpPerformanceCount=0x12df38*=29519622776) returned 1 [0176.557] SetEvent (hEvent=0x36c) returned 1 [0176.557] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12da20*=0x3e0, lpdwindex=0x12d7f4 | out: lpdwindex=0x12d7f4) returned 0x80010115 [0176.557] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d9c0*=0x3d4, lpdwindex=0x12d794 | out: lpdwindex=0x12d794) returned 0x80010115 [0176.558] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12d9c0*=0x3dc, lpdwindex=0x12d794 | out: lpdwindex=0x12d794) returned 0x80010115 [0176.558] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12daa0*=0x404, lpdwindex=0x12d874 | out: lpdwindex=0x12d874) returned 0x80010115 [0176.558] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12daa0*=0x40c, lpdwindex=0x12d874 | out: lpdwindex=0x12d874) returned 0x80010115 [0176.558] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x12daa0*=0x414, lpdwindex=0x12d874 | out: lpdwindex=0x12d874) returned 0x80010115 [0176.560] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x340 [0176.560] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x49c [0176.561] GetAddrInfoW (in: pNodeName="fairybreathes.6te.net", pServiceName=0x0, pHints=0x12daa8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x12d9f0 | out: ppResult=0x12d9f0*=0x0) returned 11004 [0176.934] setsockopt (s=0x340, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0176.934] closesocket (s=0x340) returned 0 [0176.934] setsockopt (s=0x49c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0176.934] closesocket (s=0x49c) returned 0 [0176.969] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x27688e8, nLength=0xc, lpnLengthNeeded=0x127370 | out: pvInfo=0x27688e8, lpnLengthNeeded=0x127370) returned 1 [0176.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.992] AdjustWindowRectEx (in: lpRect=0x127230, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127230) returned 1 [0176.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.995] AdjustWindowRectEx (in: lpRect=0x127220, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127220) returned 1 [0176.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.996] AdjustWindowRectEx (in: lpRect=0x127200, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127200) returned 1 [0176.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.997] AdjustWindowRectEx (in: lpRect=0x127200, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127200) returned 1 [0176.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.997] AdjustWindowRectEx (in: lpRect=0x127200, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127200) returned 1 [0176.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0176.998] AdjustWindowRectEx (in: lpRect=0x127200, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127200) returned 1 [0176.999] GetDC (hWnd=0x0) returned 0x20109b2 [0177.000] GdipCreateFromHDC (hdc=0x20109b2, graphics=0x126f78) returned 0x0 [0177.006] GdipGetFontHeight (font=0x1afc3a40, graphics=0x1af5d3c0, height=0x126f74) returned 0x0 [0177.006] GdipDeleteGraphics (graphics=0x1af5d3c0) returned 0x0 [0177.007] ReleaseDC (hWnd=0x0, hDC=0x20109b2) returned 1 [0177.007] GetSystemMetrics (nIndex=5) returned 1 [0177.007] GetSystemMetrics (nIndex=6) returned 1 [0177.008] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0177.009] AdjustWindowRectEx (in: lpRect=0x127220, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x127220) returned 1 [0177.010] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0177.010] AdjustWindowRectEx (in: lpRect=0x1271c0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1271c0) returned 1 [0177.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0177.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0177.926] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d1b66e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x5078a0)) returned 1 [0177.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0177.929] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x80c [0177.933] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorlib.dll", dwHandle=0x0, dwLen=0x80c, lpData=0x2773798 | out: lpData=0x2773798) returned 1 [0177.935] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x2773b98, puLen=0x1271e0) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773850, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27738a4, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773924, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773980, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27739c0, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773a48, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773a84, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773adc, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773b08, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2773b44, puLen=0x127180) returned 1 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.936] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x2773b98, puLen=0x127130) returned 1 [0177.937] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0177.937] VerQueryValueW (in: pBlock=0x2773798, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27737c0, puLen=0x127180) returned 1 [0177.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x126af0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0177.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x1269e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0177.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x126970, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0177.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x126900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0177.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x126a50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0177.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x126e90) returned 1 [0177.955] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x126f70 | out: lpFileInformation=0x126f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279e2c00, ftCreationTime.dwHighDateTime=0x1cd5cf6, ftLastAccessTime.dwLowDateTime=0xcf7c84e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279e2c00, ftLastWriteTime.dwHighDateTime=0x1cd5cf6, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0177.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x126e50) returned 1 [0177.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x126950, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0177.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x126e30) returned 1 [0177.956] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0177.956] GetFileType (hFile=0x368) returned 0x1 [0177.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x126da0) returned 1 [0177.956] GetFileType (hFile=0x368) returned 0x1 [0177.959] GetFileSize (in: hFile=0x368, lpFileSizeHigh=0x126df8 | out: lpFileSizeHigh=0x126df8*=0x0) returned 0x8c8f [0177.959] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126d68, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126d68*=0x1000, lpOverlapped=0x0) returned 1 [0177.962] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126cc8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126cc8*=0x1000, lpOverlapped=0x0) returned 1 [0177.962] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0x1000, lpOverlapped=0x0) returned 1 [0177.962] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0x1000, lpOverlapped=0x0) returned 1 [0177.962] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0x1000, lpOverlapped=0x0) returned 1 [0177.962] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0x1000, lpOverlapped=0x0) returned 1 [0177.963] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126cb8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126cb8*=0x1000, lpOverlapped=0x0) returned 1 [0177.963] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0x1000, lpOverlapped=0x0) returned 1 [0177.963] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126bf8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126bf8*=0xc8f, lpOverlapped=0x0) returned 1 [0177.963] ReadFile (in: hFile=0x368, lpBuffer=0x2777b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x126cd8, lpOverlapped=0x0 | out: lpBuffer=0x2777b28*, lpNumberOfBytesRead=0x126cd8*=0x0, lpOverlapped=0x0) returned 1 [0177.963] CloseHandle (hObject=0x368) returned 1 [0177.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x126940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0177.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", nBufferLength=0x105, lpBuffer=0x126a90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config", lpFilePart=0x0) returned 0x3f [0177.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x126ed0) returned 1 [0177.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x126fb0 | out: lpFileInformation=0x126fb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x126e90) returned 1 [0177.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpFilePart=0x0) returned 0x38 [0177.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0177.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb3bcc40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3e2da0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5200)) returned 1 [0177.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0177.965] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x754 [0177.965] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", dwHandle=0x0, dwLen=0x754, lpData=0x277f568 | out: lpData=0x277f568) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x277f604, puLen=0x1271e0) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f6a4, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f6ec, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f728, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f758, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f7a4, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f83c, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f884, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f8c8, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f65c, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f7f0, puLen=0x127180) returned 1 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x277f604, puLen=0x127130) returned 1 [0177.966] VerLanguageNameW (in: wLang=0x0, szLang=0x126e60, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0177.966] VerQueryValueW (in: pBlock=0x277f568, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x277f590, puLen=0x127180) returned 1 [0177.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0177.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0177.969] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b0932a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x498ed0)) returned 1 [0177.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0177.969] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x7ec [0177.974] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", dwHandle=0x0, dwLen=0x7ec, lpData=0x2781cb0 | out: lpData=0x2781cb0) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x27820a0, puLen=0x1271e0) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781d68, puLen=0x127180) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781dbc, puLen=0x127180) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781dfc, puLen=0x127180) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781e58, puLen=0x127180) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781eb0, puLen=0x127180) returned 1 [0177.975] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781f38, puLen=0x127180) returned 1 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781f8c, puLen=0x127180) returned 1 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781fe4, puLen=0x127180) returned 1 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2782010, puLen=0x127180) returned 1 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278204c, puLen=0x127180) returned 1 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x27820a0, puLen=0x127130) returned 1 [0177.976] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0177.976] VerQueryValueW (in: pBlock=0x2781cb0, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2781cd8, puLen=0x127180) returned 1 [0177.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x5b [0177.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0177.977] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system\\v4.0_4.0.0.0__b77a5c561934e089\\system.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x676d9d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x352280)) returned 1 [0177.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0177.978] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x77c [0178.024] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System\\v4.0_4.0.0.0__b77a5c561934e089\\System.dll", dwHandle=0x0, dwLen=0x77c, lpData=0x27844c0 | out: lpData=0x27844c0) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x2784878, puLen=0x1271e0) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2784578, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27845cc, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278460c, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2784668, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27846a4, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278472c, puLen=0x127180) returned 1 [0178.026] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2784764, puLen=0x127180) returned 1 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27847bc, puLen=0x127180) returned 1 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27847e8, puLen=0x127180) returned 1 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2784824, puLen=0x127180) returned 1 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x2784878, puLen=0x127130) returned 1 [0178.027] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0178.027] VerQueryValueW (in: pBlock=0x27844c0, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27844e8, puLen=0x127180) returned 1 [0178.028] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", lpFilePart=0x0) returned 0x6b [0178.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0178.028] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x67a6be20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x912b0)) returned 1 [0178.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0178.029] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x7bc [0178.041] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Drawing\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll", dwHandle=0x0, dwLen=0x7bc, lpData=0x2787ed0 | out: lpData=0x2787ed0) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x27882a8, puLen=0x1271e0) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2787f88, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2787fdc, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278801c, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2788078, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27880c4, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278814c, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2788194, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27881ec, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2788218, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2788254, puLen=0x127180) returned 1 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.043] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x27882a8, puLen=0x127130) returned 1 [0178.043] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0178.044] VerQueryValueW (in: pBlock=0x2787ed0, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2787ef8, puLen=0x127180) returned 1 [0178.045] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x65 [0178.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0178.045] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.core\\v4.0_4.0.0.0__b77a5c561934e089\\system.core.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x61e08840, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x141ea0)) returned 1 [0178.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0178.046] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x79c [0178.067] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Core\\v4.0_4.0.0.0__b77a5c561934e089\\System.Core.dll", dwHandle=0x0, dwLen=0x79c, lpData=0x278a920 | out: lpData=0x278a920) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x278ace8, puLen=0x1271e0) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278a9d8, puLen=0x127180) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278aa2c, puLen=0x127180) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278aa6c, puLen=0x127180) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278aac8, puLen=0x127180) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278ab0c, puLen=0x127180) returned 1 [0178.068] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278ab94, puLen=0x127180) returned 1 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278abd4, puLen=0x127180) returned 1 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278ac2c, puLen=0x127180) returned 1 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278ac58, puLen=0x127180) returned 1 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278ac94, puLen=0x127180) returned 1 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x278ace8, puLen=0x127130) returned 1 [0178.069] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0178.069] VerQueryValueW (in: pBlock=0x278a920, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278a948, puLen=0x127180) returned 1 [0178.070] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", lpFilePart=0x0) returned 0x77 [0178.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0178.071] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\system.configuration.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x661475c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x624d0)) returned 1 [0178.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0178.072] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x814 [0178.086] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Configuration\\v4.0_4.0.0.0__b03f5f7f11d50a3a\\System.Configuration.dll", dwHandle=0x0, dwLen=0x814, lpData=0x278d738 | out: lpData=0x278d738) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x278db3c, puLen=0x1271e0) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d7f0, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d844, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d898, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d8f4, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d94c, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d9d4, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278da28, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278da80, puLen=0x127180) returned 1 [0178.088] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278daac, puLen=0x127180) returned 1 [0178.089] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.089] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278dae8, puLen=0x127180) returned 1 [0178.089] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.089] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x278db3c, puLen=0x127130) returned 1 [0178.089] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0178.089] VerQueryValueW (in: pBlock=0x278d738, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x278d760, puLen=0x127180) returned 1 [0178.091] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x126c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x63 [0178.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1270b0) returned 1 [0178.091] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.xml\\v4.0_4.0.0.0__b77a5c561934e089\\system.xml.dll"), fInfoLevelId=0x0, lpFileInformation=0x127190 | out: lpFileInformation=0x127190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b38ce20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x284698)) returned 1 [0178.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x127070) returned 1 [0178.093] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", lpdwHandle=0x127268 | out: lpdwHandle=0x127268) returned 0x79c [0178.168] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Xml\\v4.0_4.0.0.0__b77a5c561934e089\\System.Xml.dll", dwHandle=0x0, dwLen=0x79c, lpData=0x2790228 | out: lpData=0x2790228) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1271e8, puLen=0x1271e0 | out: lplpBuffer=0x1271e8*=0x27905f0, puLen=0x1271e0) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27902e0, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790334, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790374, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27903d0, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790414, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x279049c, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x27904dc, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790534, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790560, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x279059c, puLen=0x127180) returned 1 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x0, puLen=0x127180) returned 0 [0178.170] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x127138, puLen=0x127130 | out: lplpBuffer=0x127138*=0x27905f0, puLen=0x127130) returned 1 [0178.170] VerLanguageNameW (in: wLang=0x409, szLang=0x126e60, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0178.171] VerQueryValueW (in: pBlock=0x2790228, lpSubBlock="\\", lplpBuffer=0x127188, puLen=0x127180 | out: lplpBuffer=0x127188*=0x2790250, puLen=0x127180) returned 1 [0178.172] GetCurrentActCtx (in: lphActCtx=0x127110 | out: lphActCtx=0x127110*=0xfa4ea8) returned 1 [0178.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.179] GetCurrentActCtx (in: lphActCtx=0x126fe0 | out: lphActCtx=0x126fe0*=0xfa4ea8) returned 1 [0178.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.180] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.180] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2004c [0178.181] SetWindowLongPtrW (hWnd=0x2004c, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0178.181] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-4) returned 0x77a8b0ac [0178.182] SetWindowLongPtrW (hWnd=0x2004c, nIndex=-4, dwNewLong=0x1ae8162c) returned 0x77a8b0ac [0178.182] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-4) returned 0x1ae8162c [0178.182] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-16) returned 0x6c10000 [0178.182] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x24, wParam=0x0, lParam=0x126730) returned 0x0 [0178.182] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x81, wParam=0x0, lParam=0x1266a0) returned 0x1 [0178.182] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x83, wParam=0x0, lParam=0x126750) returned 0x0 [0178.182] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x1, wParam=0x0, lParam=0x126660) returned 0x0 [0178.182] GetClientRect (in: hWnd=0x2004c, lpRect=0x1260d0 | out: lpRect=0x1260d0) returned 1 [0178.182] GetWindowRect (in: hWnd=0x2004c, lpRect=0x1260d0 | out: lpRect=0x1260d0) returned 1 [0178.183] SetWindowTextW (hWnd=0x2004c, lpString="WindowsFormsParkingWindow") returned 1 [0178.183] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0xc, wParam=0x0, lParam=0x279486c) returned 0x1 [0178.184] GetParent (hWnd=0x2004c) returned 0x0 [0178.184] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2794cc8 | out: lpWndClass=0x2794cc8) returned 1 [0178.186] CoTaskMemAlloc (cb=0x58) returned 0x1caf06b0 [0178.186] RegisterClassW (lpWndClass=0x126df0) returned 0xc173 [0178.186] CoTaskMemFree (pv=0x1caf06b0) [0178.186] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.186] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x5600000d, X=0, Y=0, nWidth=100, nHeight=23, hWndParent=0x2004c, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x20048 [0178.187] SetWindowLongPtrW (hWnd=0x20048, nIndex=-4, dwNewLong=0x7fefc5861b4) returned 0x1ae8167c [0178.187] GetWindowLongPtrW (hWnd=0x20048, nIndex=-4) returned 0x7fefc5861b4 [0178.187] SetWindowLongPtrW (hWnd=0x20048, nIndex=-4, dwNewLong=0x1ae816cc) returned 0x7fefc5861b4 [0178.187] GetWindowLongPtrW (hWnd=0x20048, nIndex=-4) returned 0x1ae816cc [0178.187] GetWindowLongPtrW (hWnd=0x20048, nIndex=-16) returned 0x4600000d [0178.188] GetWindowLongPtrW (hWnd=0x20048, nIndex=-12) returned 0x0 [0178.188] SetWindowLongPtrW (hWnd=0x20048, nIndex=-12, dwNewLong=0x20048) returned 0x0 [0178.188] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x81, wParam=0x0, lParam=0x1267d0) returned 0x1 [0178.188] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x83, wParam=0x0, lParam=0x126880) returned 0x0 [0178.188] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x1, wParam=0x0, lParam=0x1267d0) returned 0x0 [0178.188] GetClientRect (in: hWnd=0x20048, lpRect=0x126210 | out: lpRect=0x126210) returned 1 [0178.188] GetWindowRect (in: hWnd=0x20048, lpRect=0x126210 | out: lpRect=0x126210) returned 1 [0178.188] GetParent (hWnd=0x20048) returned 0x2004c [0178.189] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2004c, lpPoints=0x126210, cPoints=0x2 | out: lpPoints=0x126210) returned -1572867 [0178.190] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0 [0178.190] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0178.190] GetClientRect (in: hWnd=0x20048, lpRect=0x126320 | out: lpRect=0x126320) returned 1 [0178.190] GetWindowRect (in: hWnd=0x20048, lpRect=0x126320 | out: lpRect=0x126320) returned 1 [0178.190] GetParent (hWnd=0x20048) returned 0x2004c [0178.190] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2004c, lpPoints=0x126320, cPoints=0x2 | out: lpPoints=0x126320) returned -1572867 [0178.191] SendMessageW (hWnd=0x20048, Msg=0x2210, wParam=0x480001, lParam=0x20048) returned 0x0 [0178.191] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x2210, wParam=0x480001, lParam=0x20048) returned 0x0 [0178.191] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.191] GetParent (hWnd=0x20048) returned 0x2004c [0178.191] GdipCreateFromHWND (hwnd=0x20048, graphics=0x127288) returned 0x0 [0178.200] GdipMeasureString (graphics=0x1af5d3c0, string="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.", length=266, font=0x1afc3a40, layoutRect=0x127218, stringFormat=0x0, boundingBox=0x127208, codepointsFitted=0x127200, linesFilled=0x1271f8) returned 0x0 [0178.220] GdipDeleteGraphics (graphics=0x1af5d3c0) returned 0x0 [0178.226] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.226] GetCursorPos (in: lpPoint=0x27953b0 | out: lpPoint=0x27953b0*(x=292, y=879)) returned 1 [0178.229] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126dc0 | out: lpmi=0x126dc0) returned 1 [0178.229] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6e0107ab [0178.229] GetDeviceCaps (hdc=0x6e0107ab, index=12) returned 32 [0178.229] GetDeviceCaps (hdc=0x6e0107ab, index=14) returned 1 [0178.229] DeleteDC (hdc=0x6e0107ab) returned 1 [0178.230] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126e90 | out: lpmi=0x126e90) returned 1 [0178.230] AdjustWindowRectEx (in: lpRect=0x127188, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x127188) returned 1 [0178.230] GetSystemMetrics (nIndex=59) returned 1460 [0178.230] GetSystemMetrics (nIndex=60) returned 920 [0178.230] GetSystemMetrics (nIndex=34) returned 132 [0178.230] GetSystemMetrics (nIndex=35) returned 38 [0178.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.231] GetCursorPos (in: lpPoint=0x2795710 | out: lpPoint=0x2795710*(x=292, y=879)) returned 1 [0178.231] MonitorFromPoint (pt=0x36f00000126, dwFlags=0x2) returned 0x10001 [0178.231] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126b70 | out: lpmi=0x126b70) returned 1 [0178.231] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6f0107ab [0178.231] GetDeviceCaps (hdc=0x6f0107ab, index=12) returned 32 [0178.232] GetDeviceCaps (hdc=0x6f0107ab, index=14) returned 1 [0178.232] DeleteDC (hdc=0x6f0107ab) returned 1 [0178.232] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126c40 | out: lpmi=0x126c40) returned 1 [0178.232] AdjustWindowRectEx (in: lpRect=0x126f48, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x126f48) returned 1 [0178.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.240] AdjustWindowRectEx (in: lpRect=0x127128, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127128) returned 1 [0178.250] LoadIconW (hInstance=0x0, lpIconName=0x7f01) returned 0x1002d [0178.255] GetIconInfo (in: hIcon=0x1002d, piconinfo=0x2795c00 | out: piconinfo=0x2795c00) returned 1 [0178.257] GetObjectW (in: h=0xffffffffa9050799, c=32, pv=0x2795c30 | out: pv=0x2795c30) returned 32 [0178.260] GdipCreateBitmapFromHBITMAP (hbm=0xffffffffa9050799, hpal=0x0, bitmap=0x127080) returned 0x0 [0178.262] GdipGetImageWidth (image=0x1bae0fd0, width=0x1270c8) returned 0x0 [0178.263] GdipGetImageHeight (image=0x1bae0fd0, height=0x1270c8) returned 0x0 [0178.264] GdipGetImagePixelFormat (image=0x1bae0fd0, format=0x1270c8) returned 0x0 [0178.265] GdipBitmapLockBits (bitmap=0x1bae0fd0, rect=0x127070, flags=0x1, format=0x22009, lockedBitmapData=0x2795db0) returned 0x0 [0178.267] GdipCreateBitmapFromScan0 (width=32, height=32, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1270b8) returned 0x0 [0178.268] GdipBitmapLockBits (bitmap=0x1aff7460, rect=0x127070, flags=0x2, format=0x26200a, lockedBitmapData=0x2795e10) returned 0x0 [0178.268] RtlMoveMemory (in: Destination=0x1bae93b0, Source=0x1aff73d0, Length=0x80 | out: Destination=0x1bae93b0) [0178.268] RtlMoveMemory (in: Destination=0x1bae9430, Source=0x1aff7350, Length=0x80 | out: Destination=0x1bae9430) [0178.268] RtlMoveMemory (in: Destination=0x1bae94b0, Source=0x1aff72d0, Length=0x80 | out: Destination=0x1bae94b0) [0178.268] RtlMoveMemory (in: Destination=0x1bae9530, Source=0x1aff7250, Length=0x80 | out: Destination=0x1bae9530) [0178.268] RtlMoveMemory (in: Destination=0x1bae95b0, Source=0x1aff71d0, Length=0x80 | out: Destination=0x1bae95b0) [0178.268] RtlMoveMemory (in: Destination=0x1bae9630, Source=0x1aff7150, Length=0x80 | out: Destination=0x1bae9630) [0178.268] RtlMoveMemory (in: Destination=0x1bae96b0, Source=0x1aff70d0, Length=0x80 | out: Destination=0x1bae96b0) [0178.268] RtlMoveMemory (in: Destination=0x1bae9730, Source=0x1aff7050, Length=0x80 | out: Destination=0x1bae9730) [0178.269] RtlMoveMemory (in: Destination=0x1bae97b0, Source=0x1aff6fd0, Length=0x80 | out: Destination=0x1bae97b0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9830, Source=0x1aff6f50, Length=0x80 | out: Destination=0x1bae9830) [0178.269] RtlMoveMemory (in: Destination=0x1bae98b0, Source=0x1aff6ed0, Length=0x80 | out: Destination=0x1bae98b0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9930, Source=0x1aff6e50, Length=0x80 | out: Destination=0x1bae9930) [0178.269] RtlMoveMemory (in: Destination=0x1bae99b0, Source=0x1aff6dd0, Length=0x80 | out: Destination=0x1bae99b0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9a30, Source=0x1aff6d50, Length=0x80 | out: Destination=0x1bae9a30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9ab0, Source=0x1aff6cd0, Length=0x80 | out: Destination=0x1bae9ab0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9b30, Source=0x1aff6c50, Length=0x80 | out: Destination=0x1bae9b30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9bb0, Source=0x1aff6bd0, Length=0x80 | out: Destination=0x1bae9bb0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9c30, Source=0x1aff6b50, Length=0x80 | out: Destination=0x1bae9c30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9cb0, Source=0x1aff6ad0, Length=0x80 | out: Destination=0x1bae9cb0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9d30, Source=0x1aff6a50, Length=0x80 | out: Destination=0x1bae9d30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9db0, Source=0x1aff69d0, Length=0x80 | out: Destination=0x1bae9db0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9e30, Source=0x1aff6950, Length=0x80 | out: Destination=0x1bae9e30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9eb0, Source=0x1aff68d0, Length=0x80 | out: Destination=0x1bae9eb0) [0178.269] RtlMoveMemory (in: Destination=0x1bae9f30, Source=0x1aff6850, Length=0x80 | out: Destination=0x1bae9f30) [0178.269] RtlMoveMemory (in: Destination=0x1bae9fb0, Source=0x1aff67d0, Length=0x80 | out: Destination=0x1bae9fb0) [0178.269] RtlMoveMemory (in: Destination=0x1baea030, Source=0x1aff6750, Length=0x80 | out: Destination=0x1baea030) [0178.269] RtlMoveMemory (in: Destination=0x1baea0b0, Source=0x1aff66d0, Length=0x80 | out: Destination=0x1baea0b0) [0178.270] RtlMoveMemory (in: Destination=0x1baea130, Source=0x1aff6650, Length=0x80 | out: Destination=0x1baea130) [0178.270] RtlMoveMemory (in: Destination=0x1baea1b0, Source=0x1aff65d0, Length=0x80 | out: Destination=0x1baea1b0) [0178.270] RtlMoveMemory (in: Destination=0x1baea230, Source=0x1aff6550, Length=0x80 | out: Destination=0x1baea230) [0178.270] RtlMoveMemory (in: Destination=0x1baea2b0, Source=0x1aff64d0, Length=0x80 | out: Destination=0x1baea2b0) [0178.270] RtlMoveMemory (in: Destination=0x1baea330, Source=0x1aff6450, Length=0x80 | out: Destination=0x1baea330) [0178.271] GdipBitmapUnlockBits (bitmap=0x1bae0fd0, lockedBitmapData=0x2795db0) returned 0x0 [0178.271] GdipBitmapUnlockBits (bitmap=0x1aff7460, lockedBitmapData=0x2795e10) returned 0x0 [0178.271] GdipDisposeImage (image=0x1bae0fd0) returned 0x0 [0178.272] DeleteObject (ho=0xffffffffa9050799) returned 1 [0178.272] DeleteObject (ho=0x700507ab) returned 1 [0178.273] GetCurrentThreadId () returned 0x408 [0178.273] GetCurrentThreadId () returned 0x408 [0178.276] SetWindowPos (hWnd=0x20048, hWndInsertAfter=0x0, X=64, Y=8, cx=354, cy=68, uFlags=0x14) returned 1 [0178.276] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x46, wParam=0x0, lParam=0x127030) returned 0x0 [0178.276] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x83, wParam=0x1, lParam=0x127000) returned 0x0 [0178.277] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x47, wParam=0x0, lParam=0x127030) returned 0x0 [0178.277] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x3, wParam=0x0, lParam=0x80040) returned 0x0 [0178.277] GetClientRect (in: hWnd=0x20048, lpRect=0x126080 | out: lpRect=0x126080) returned 1 [0178.277] GetWindowRect (in: hWnd=0x20048, lpRect=0x126080 | out: lpRect=0x126080) returned 1 [0178.277] GetParent (hWnd=0x20048) returned 0x2004c [0178.277] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2004c, lpPoints=0x126080, cPoints=0x2 | out: lpPoints=0x126080) returned -1572867 [0178.277] InvalidateRect (hWnd=0x20048, lpRect=0x0, bErase=1) returned 1 [0178.278] GetWindowTextLengthW (hWnd=0x20048) returned 0 [0178.278] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0178.278] GetSystemMetrics (nIndex=42) returned 0 [0178.278] GetWindowTextW (in: hWnd=0x20048, lpString=0x125d00, nMaxCount=1 | out: lpString="") returned 0 [0178.278] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x1, lParam=0x125d00) returned 0x0 [0178.278] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x5, wParam=0x0, lParam=0x440162) returned 0x0 [0178.278] GetClientRect (in: hWnd=0x20048, lpRect=0x126a60 | out: lpRect=0x126a60) returned 1 [0178.278] GetWindowRect (in: hWnd=0x20048, lpRect=0x126a60 | out: lpRect=0x126a60) returned 1 [0178.278] GetParent (hWnd=0x20048) returned 0x2004c [0178.278] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2004c, lpPoints=0x126a60, cPoints=0x2 | out: lpPoints=0x126a60) returned -1572867 [0178.286] GetWindowTextLengthW (hWnd=0x20048) returned 0 [0178.286] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0178.287] GetSystemMetrics (nIndex=42) returned 0 [0178.287] GetWindowTextW (in: hWnd=0x20048, lpString=0x1270d0, nMaxCount=1 | out: lpString="") returned 0 [0178.287] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x1, lParam=0x1270d0) returned 0x0 [0178.287] GetWindowTextLengthW (hWnd=0x20048) returned 0 [0178.287] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0178.287] GetSystemMetrics (nIndex=42) returned 0 [0178.287] GetWindowTextW (in: hWnd=0x20048, lpString=0x127070, nMaxCount=1 | out: lpString="") returned 0 [0178.287] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x1, lParam=0x127070) returned 0x0 [0178.287] SetWindowTextW (hWnd=0x20048, lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.") returned 1 [0178.287] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xc, wParam=0x0, lParam=0x276c62c) returned 0x1 [0178.288] InvalidateRect (hWnd=0x20048, lpRect=0x0, bErase=1) returned 1 [0178.288] GetCurrentThreadId () returned 0x408 [0178.289] GetWindowThreadProcessId (in: hWnd=0x20048, lpdwProcessId=0x1271d0 | out: lpdwProcessId=0x1271d0) returned 0x408 [0178.301] GdipCreateBitmapFromStream (stream=0xbb0020, bitmap=0x127260) returned 0x0 [0178.340] GdipImageForceValidation (image=0x1bae0fd0) returned 0x0 [0178.342] GdipGetImageRawFormat (image=0x1bae0fd0, format=0x127170*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0178.346] GdipGetImageHeight (image=0x1bae0fd0, height=0x127218) returned 0x0 [0178.346] GdipGetImageWidth (image=0x1bae0fd0, width=0x127218) returned 0x0 [0178.346] GdipGetImageWidth (image=0x1bae0fd0, width=0x1271d8) returned 0x0 [0178.346] GdipGetImageHeight (image=0x1bae0fd0, height=0x1271d8) returned 0x0 [0178.346] GdipGetImageWidth (image=0x1bae0fd0, width=0x1271a8) returned 0x0 [0178.346] GdipGetImageHeight (image=0x1bae0fd0, height=0x1271a8) returned 0x0 [0178.346] GdipBitmapGetPixel (bitmap=0x1bae0fd0, x=0, y=15, color=0x127208) returned 0x0 [0178.347] GdipGetImageRawFormat (image=0x1bae0fd0, format=0x127050*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0178.347] GdipGetImageWidth (image=0x1bae0fd0, width=0x127018) returned 0x0 [0178.347] GdipGetImageHeight (image=0x1bae0fd0, height=0x127018) returned 0x0 [0178.347] GdipCreateBitmapFromScan0 (width=16, height=16, stride=0, format=0x26200a, scan0=0x0, bitmap=0x127048) returned 0x0 [0178.347] GdipGetImagePixelFormat (image=0x1aff7c60, format=0x126ff8) returned 0x0 [0178.347] GdipGetImageGraphicsContext (image=0x1aff7c60, graphics=0x127058) returned 0x0 [0178.348] GdipGraphicsClear (graphics=0x1aff8250, color=0xffffff) returned 0x0 [0178.349] GdipCreateImageAttributes (imageattr=0x127060) returned 0x0 [0178.349] GdipSetImageAttributesColorKeys (imageattr=0x1afff050, type=0x0, enableFlag=1, colorLow=0xffffffffffc0c0c0, colorHigh=0xffffffffffc0c0c0) returned 0x0 [0178.350] GdipDrawImageRectRectI (graphics=0x1aff8250, image=0x1bae0fd0, dstx=0, dsty=0, dstwidth=16, dstheight=16, srcx=0, srcy=0, srcwidth=16, srcheight=16, srcUnit=0x2, imageAttributes=0x1afff050, callback=0x0, callbackData=0x0) returned 0x0 [0178.352] GdipDisposeImageAttributes (imageattr=0x1afff050) returned 0x0 [0178.352] GdipDeleteGraphics (graphics=0x1aff8250) returned 0x0 [0178.352] GdipDisposeImage (image=0x1bae0fd0) returned 0x0 [0178.353] GdipCreateBitmapFromStream (stream=0xbbffa0, bitmap=0x127260) returned 0x0 [0178.354] GdipImageForceValidation (image=0x1bae0fd0) returned 0x0 [0178.356] GdipGetImageRawFormat (image=0x1bae0fd0, format=0x127170*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0178.356] GdipGetImageHeight (image=0x1bae0fd0, height=0x127218) returned 0x0 [0178.356] GdipGetImageWidth (image=0x1bae0fd0, width=0x127218) returned 0x0 [0178.356] GdipGetImageWidth (image=0x1bae0fd0, width=0x1271d8) returned 0x0 [0178.356] GdipGetImageHeight (image=0x1bae0fd0, height=0x1271d8) returned 0x0 [0178.356] GdipGetImageWidth (image=0x1bae0fd0, width=0x1271a8) returned 0x0 [0178.356] GdipGetImageHeight (image=0x1bae0fd0, height=0x1271a8) returned 0x0 [0178.356] GdipBitmapGetPixel (bitmap=0x1bae0fd0, x=0, y=15, color=0x127208) returned 0x0 [0178.356] GdipGetImageRawFormat (image=0x1bae0fd0, format=0x127050*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0178.356] GdipGetImageWidth (image=0x1bae0fd0, width=0x127018) returned 0x0 [0178.356] GdipGetImageHeight (image=0x1bae0fd0, height=0x127018) returned 0x0 [0178.356] GdipCreateBitmapFromScan0 (width=16, height=16, stride=0, format=0x26200a, scan0=0x0, bitmap=0x127048) returned 0x0 [0178.356] GdipGetImagePixelFormat (image=0x1bae3aa0, format=0x126ff8) returned 0x0 [0178.356] GdipGetImageGraphicsContext (image=0x1bae3aa0, graphics=0x127058) returned 0x0 [0178.356] GdipGraphicsClear (graphics=0x1bae4090, color=0xffffff) returned 0x0 [0178.357] GdipCreateImageAttributes (imageattr=0x127060) returned 0x0 [0178.357] GdipSetImageAttributesColorKeys (imageattr=0x1afff050, type=0x0, enableFlag=1, colorLow=0xffffffffffc0c0c0, colorHigh=0xffffffffffc0c0c0) returned 0x0 [0178.357] GdipDrawImageRectRectI (graphics=0x1bae4090, image=0x1bae0fd0, dstx=0, dsty=0, dstwidth=16, dstheight=16, srcx=0, srcy=0, srcwidth=16, srcheight=16, srcUnit=0x2, imageAttributes=0x1afff050, callback=0x0, callbackData=0x0) returned 0x0 [0178.357] GdipDisposeImageAttributes (imageattr=0x1afff050) returned 0x0 [0178.357] GdipDeleteGraphics (graphics=0x1bae4090) returned 0x0 [0178.357] GdipDisposeImage (image=0x1bae0fd0) returned 0x0 [0178.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.358] AdjustWindowRectEx (in: lpRect=0x127168, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127168) returned 1 [0178.360] GetCurrentThreadId () returned 0x408 [0178.360] GetCurrentThreadId () returned 0x408 [0178.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.360] AdjustWindowRectEx (in: lpRect=0x127168, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127168) returned 1 [0178.360] GetCurrentThreadId () returned 0x408 [0178.360] GetCurrentThreadId () returned 0x408 [0178.361] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.361] AdjustWindowRectEx (in: lpRect=0x127168, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x127168) returned 1 [0178.361] GetCurrentThreadId () returned 0x408 [0178.361] GetCurrentThreadId () returned 0x408 [0178.365] GetSystemMetrics (nIndex=5) returned 1 [0178.365] GetSystemMetrics (nIndex=6) returned 1 [0178.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.366] AdjustWindowRectEx (in: lpRect=0x127048, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x127048) returned 1 [0178.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.366] AdjustWindowRectEx (in: lpRect=0x127048, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x127048) returned 1 [0178.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.371] AdjustWindowRectEx (in: lpRect=0x127168, dwStyle=0x563008c4, bMenu=0, dwExStyle=0x200 | out: lpRect=0x127168) returned 1 [0178.371] GetCurrentThreadId () returned 0x408 [0178.371] GetCurrentThreadId () returned 0x408 [0178.375] GetProcessWindowStation () returned 0x44 [0178.377] GetCurrentActCtx (in: lphActCtx=0x1271f0 | out: lphActCtx=0x1271f0*=0xfa4ea8) returned 1 [0178.377] GetProcessWindowStation () returned 0x44 [0178.378] OleInitialize (pvReserved=0x0) returned 0x0 [0178.378] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x127138 | out: lplpMessageFilter=0x127138*=0x0) returned 0x0 [0178.382] GetCurrentThreadId () returned 0x408 [0178.382] EnumThreadWindows (dwThreadId=0x408, lpfn=0x1ae81e2c, lParam=0x0) returned 1 [0178.383] IsWindowVisible (hWnd=0x2026e) returned 0 [0178.383] IsWindowVisible (hWnd=0x2026c) returned 1 [0178.383] IsWindowEnabled (hWnd=0x2026c) returned 1 [0178.383] IsWindowVisible (hWnd=0x20298) returned 0 [0178.383] IsWindowVisible (hWnd=0x2029a) returned 0 [0178.383] GetActiveWindow () returned 0x0 [0178.385] GetFocus () returned 0x0 [0178.385] IsWindow (hWnd=0x2026c) returned 1 [0178.388] EnableWindow (hWnd=0x2026c, bEnable=0) returned 0 [0178.388] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0178.388] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0178.389] GetCurrentActCtx (in: lphActCtx=0x126fa0 | out: lphActCtx=0x126fa0*=0xfa4ea8) returned 1 [0178.389] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.389] AdjustWindowRectEx (in: lpRect=0x126ec0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x126ec0) returned 1 [0178.389] GetCursorPos (in: lpPoint=0x2798638 | out: lpPoint=0x2798638*(x=292, y=879)) returned 1 [0178.389] MonitorFromPoint (pt=0x36f00000124, dwFlags=0x2) returned 0x10001 [0178.389] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126c70 | out: lpmi=0x126c70) returned 1 [0178.390] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x710107ab [0178.390] GetDeviceCaps (hdc=0x710107ab, index=12) returned 32 [0178.390] GetDeviceCaps (hdc=0x710107ab, index=14) returned 1 [0178.390] DeleteDC (hdc=0x710107ab) returned 1 [0178.390] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126d40 | out: lpmi=0x126d40) returned 1 [0178.390] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Microsoft .NET Framework", dwStyle=0x2c80000, X=498, Y=353, nWidth=444, nHeight=153, hWndParent=0x0, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2010a [0178.390] SetWindowLongPtrW (hWnd=0x2010a, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0178.391] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-4) returned 0x77a8b0ac [0178.391] SetWindowLongPtrW (hWnd=0x2010a, nIndex=-4, dwNewLong=0x1ae81e7c) returned 0x77a8b0ac [0178.391] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-4) returned 0x1ae81e7c [0178.391] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-16) returned 0x6c80000 [0178.391] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x81, wParam=0x0, lParam=0x126660) returned 0x1 [0178.391] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x83, wParam=0x0, lParam=0x126710) returned 0x0 [0178.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x1, wParam=0x0, lParam=0x126620) returned 0x0 [0178.392] GetClientRect (in: hWnd=0x2010a, lpRect=0x1260a0 | out: lpRect=0x1260a0) returned 1 [0178.392] GetWindowRect (in: hWnd=0x2010a, lpRect=0x1260a0 | out: lpRect=0x1260a0) returned 1 [0178.392] SetWindowTextW (hWnd=0x2010a, lpString="Microsoft .NET Framework") returned 1 [0178.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xc, wParam=0x0, lParam=0x27951a4) returned 0x1 [0178.393] GetStartupInfoW (in: lpStartupInfo=0x2798ac0 | out: lpStartupInfo=0x2798ac0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0178.393] GetParent (hWnd=0x2010a) returned 0x0 [0178.393] SetWindowLongPtrW (hWnd=0x2010a, nIndex=-8, dwNewLong=0x0) returned 0x0 [0178.394] SendMessageW (hWnd=0x2010a, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0178.394] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0178.394] SendMessageW (hWnd=0x2010a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0178.394] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0178.395] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.395] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.395] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.396] GetSystemMenu (hWnd=0x2010a, bRevert=0) returned 0x1400d7 [0178.397] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126fa8 | out: lpwndpl=0x126fa8) returned 1 [0178.397] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0178.397] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0178.397] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0178.397] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0178.397] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0178.397] GetClientRect (in: hWnd=0x2010a, lpRect=0x127070 | out: lpRect=0x127070) returned 1 [0178.397] GetClientRect (in: hWnd=0x2010a, lpRect=0x126fa0 | out: lpRect=0x126fa0) returned 1 [0178.397] GetWindowRect (in: hWnd=0x2010a, lpRect=0x126fa0 | out: lpRect=0x126fa0) returned 1 [0178.397] SetWindowPos (hWnd=0x2010a, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0178.397] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x126f30) returned 0x0 [0178.398] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x126f30) returned 0x0 [0178.398] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0178.398] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0178.398] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0178.398] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0178.398] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0178.399] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.399] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.399] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.417] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0178.420] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0178.421] GetParent (hWnd=0x2010a) returned 0x0 [0178.421] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0178.421] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0178.422] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126b08 | out: lpwndpl=0x126b08) returned 1 [0178.422] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x47, wParam=0x0, lParam=0x126f30) returned 0x0 [0178.422] GetClientRect (in: hWnd=0x2010a, lpRect=0x1269a0 | out: lpRect=0x1269a0) returned 1 [0178.422] GetWindowRect (in: hWnd=0x2010a, lpRect=0x1269a0 | out: lpRect=0x1269a0) returned 1 [0178.422] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.422] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.422] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.424] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x83, wParam=0x1, lParam=0x126890) returned 0x0 [0178.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.425] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-16) returned 0x6c80000 [0178.425] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0178.425] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0178.425] GetSystemMetrics (nIndex=42) returned 0 [0178.425] GetWindowTextW (in: hWnd=0x2010a, lpString=0x126d80, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0178.425] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x126d80) returned 0x18 [0178.426] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0178.426] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0178.426] GetSystemMetrics (nIndex=42) returned 0 [0178.426] GetWindowTextW (in: hWnd=0x2010a, lpString=0x126d80, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0178.426] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x126d80) returned 0x18 [0178.426] GetCursorPos (in: lpPoint=0x2798f60 | out: lpPoint=0x2798f60*(x=292, y=879)) returned 1 [0178.426] MonitorFromPoint (pt=0x36f00000127, dwFlags=0x2) returned 0x10001 [0178.426] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126c40 | out: lpmi=0x126c40) returned 1 [0178.426] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x51010787 [0178.426] GetDeviceCaps (hdc=0x51010787, index=12) returned 32 [0178.426] GetDeviceCaps (hdc=0x51010787, index=14) returned 1 [0178.426] DeleteDC (hdc=0x51010787) returned 1 [0178.427] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126d10 | out: lpmi=0x126d10) returned 1 [0178.427] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-16) returned 0x6c80000 [0178.427] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-20) returned 0x50109 [0178.427] SetWindowLongPtrW (hWnd=0x2010a, nIndex=-16, dwNewLong=0x2c80000) returned 0x6c80000 [0178.427] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x126e80) returned 0x0 [0178.427] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x126e80) returned 0x0 [0178.427] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.427] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.428] SetWindowLongPtrW (hWnd=0x2010a, nIndex=-20, dwNewLong=0x50001) returned 0x50109 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x126e80) returned 0x0 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x126e80) returned 0x0 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.428] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.429] SetWindowPos (hWnd=0x2010a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0178.429] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x126ed0) returned 0x0 [0178.429] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x83, wParam=0x1, lParam=0x126ea0) returned 0x0 [0178.429] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126aa8 | out: lpwndpl=0x126aa8) returned 1 [0178.429] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x47, wParam=0x0, lParam=0x126ed0) returned 0x0 [0178.430] GetClientRect (in: hWnd=0x2010a, lpRect=0x126940 | out: lpRect=0x126940) returned 1 [0178.430] GetWindowRect (in: hWnd=0x2010a, lpRect=0x126940 | out: lpRect=0x126940) returned 1 [0178.430] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.430] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.430] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.431] RedrawWindow (hWnd=0x2010a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0178.431] GetSystemMenu (hWnd=0x2010a, bRevert=0) returned 0x1400d7 [0178.431] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126f48 | out: lpwndpl=0x126f48) returned 1 [0178.431] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0178.431] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0178.431] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0178.431] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0178.431] EnableMenuItem (hMenu=0x1400d7, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0178.431] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-8) returned 0x0 [0178.431] IsWindowEnabled (hWnd=0x2010a) returned 1 [0178.431] ShowWindow (hWnd=0x2010a, nCmdShow=5) returned 0 [0178.432] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.432] GetCurrentActCtx (in: lphActCtx=0x126870 | out: lphActCtx=0x126870*=0xfa4ea8) returned 1 [0178.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.433] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.434] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=0, nWidth=64, nHeight=64, hWndParent=0x2010a, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x2004a [0178.434] SetWindowLongPtrW (hWnd=0x2004a, nIndex=-4, dwNewLong=0x77a8b0ac) returned 0x1ae8131c [0178.434] GetWindowLongPtrW (hWnd=0x2004a, nIndex=-4) returned 0x77a8b0ac [0178.434] SetWindowLongPtrW (hWnd=0x2004a, nIndex=-4, dwNewLong=0x1ae81ecc) returned 0x77a8b0ac [0178.434] GetWindowLongPtrW (hWnd=0x2004a, nIndex=-4) returned 0x1ae81ecc [0178.434] GetWindowLongPtrW (hWnd=0x2004a, nIndex=-16) returned 0x46000000 [0178.434] GetWindowLongPtrW (hWnd=0x2004a, nIndex=-12) returned 0x0 [0178.434] SetWindowLongPtrW (hWnd=0x2004a, nIndex=-12, dwNewLong=0x2004a) returned 0x0 [0178.434] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x81, wParam=0x0, lParam=0x125f30) returned 0x1 [0178.434] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x83, wParam=0x0, lParam=0x125fe0) returned 0x0 [0178.435] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x1, wParam=0x0, lParam=0x125f30) returned 0x0 [0178.435] GetWindow (hWnd=0x2004a, uCmd=0x3) returned 0x0 [0178.435] GetClientRect (in: hWnd=0x2004a, lpRect=0x1259f0 | out: lpRect=0x1259f0) returned 1 [0178.435] GetWindowRect (in: hWnd=0x2004a, lpRect=0x1259f0 | out: lpRect=0x1259f0) returned 1 [0178.436] GetParent (hWnd=0x2004a) returned 0x2010a [0178.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x1259f0, cPoints=0x2 | out: lpPoints=0x1259f0) returned -24707573 [0178.436] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x5, wParam=0x0, lParam=0x400040) returned 0x0 [0178.436] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0178.436] GetClientRect (in: hWnd=0x2004a, lpRect=0x125b00 | out: lpRect=0x125b00) returned 1 [0178.437] GetWindowRect (in: hWnd=0x2004a, lpRect=0x125b00 | out: lpRect=0x125b00) returned 1 [0178.437] GetParent (hWnd=0x2004a) returned 0x2010a [0178.437] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125b00, cPoints=0x2 | out: lpPoints=0x125b00) returned -24707573 [0178.437] SendMessageW (hWnd=0x2004a, Msg=0x2210, wParam=0x4a0001, lParam=0x2004a) returned 0x0 [0178.437] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x2210, wParam=0x4a0001, lParam=0x2004a) returned 0x0 [0178.437] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.437] GetParent (hWnd=0x2004a) returned 0x2010a [0178.437] GetParent (hWnd=0x20048) returned 0x2004c [0178.437] SetParent (hWndChild=0x20048, hWndNewParent=0x2010a) returned 0x2004c [0178.437] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0178.438] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x46, wParam=0x0, lParam=0x126880) returned 0x0 [0178.438] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0178.438] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x47, wParam=0x0, lParam=0x126880) returned 0x0 [0178.439] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x3, wParam=0x0, lParam=0x80040) returned 0x0 [0178.439] GetClientRect (in: hWnd=0x20048, lpRect=0x1258d0 | out: lpRect=0x1258d0) returned 1 [0178.439] GetWindowRect (in: hWnd=0x20048, lpRect=0x1258d0 | out: lpRect=0x1258d0) returned 1 [0178.439] GetParent (hWnd=0x20048) returned 0x2010a [0178.439] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x1258d0, cPoints=0x2 | out: lpPoints=0x1258d0) returned -24707573 [0178.439] GetClientRect (in: hWnd=0x20048, lpRect=0x1262b0 | out: lpRect=0x1262b0) returned 1 [0178.439] GetWindowRect (in: hWnd=0x20048, lpRect=0x1262b0 | out: lpRect=0x1262b0) returned 1 [0178.439] GetParent (hWnd=0x20048) returned 0x2010a [0178.439] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x1262b0, cPoints=0x2 | out: lpPoints=0x1262b0) returned -24707573 [0178.439] GetParent (hWnd=0x20048) returned 0x2010a [0178.439] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.439] GetWindow (hWnd=0x20048, uCmd=0x3) returned 0x0 [0178.439] SetWindowPos (hWnd=0x20048, hWndInsertAfter=0x2004a, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0178.439] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x46, wParam=0x0, lParam=0x1267d0) returned 0x0 [0178.440] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0178.440] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x47, wParam=0x0, lParam=0x1267d0) returned 0x0 [0178.440] GetClientRect (in: hWnd=0x20048, lpRect=0x126200 | out: lpRect=0x126200) returned 1 [0178.440] GetWindowRect (in: hWnd=0x20048, lpRect=0x126200 | out: lpRect=0x126200) returned 1 [0178.440] GetParent (hWnd=0x20048) returned 0x2010a [0178.440] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x126200, cPoints=0x2 | out: lpPoints=0x126200) returned -24707573 [0178.440] GetParent (hWnd=0x20048) returned 0x2010a [0178.440] GetWindow (hWnd=0x20048, uCmd=0x3) returned 0x2004a [0178.440] GetWindowThreadProcessId (in: hWnd=0x20048, lpdwProcessId=0x1269b8 | out: lpdwProcessId=0x1269b8) returned 0x408 [0178.441] GetCurrentActCtx (in: lphActCtx=0x126870 | out: lphActCtx=0x126870*=0xfa4ea8) returned 1 [0178.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.442] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x2799530 | out: lpWndClass=0x2799530) returned 1 [0178.442] CoTaskMemAlloc (cb=0x58) returned 0x1cc74700 [0178.442] RegisterClassW (lpWndClass=0x126550) returned 0xc174 [0178.442] CoTaskMemFree (pv=0x1cc74700) [0178.443] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.443] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="&Details", dwStyle=0x5601000b, X=8, Y=94, nWidth=100, nHeight=23, hWndParent=0x2010a, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x4028c [0178.443] SetWindowLongPtrW (hWnd=0x4028c, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1ae81f1c [0178.443] GetWindowLongPtrW (hWnd=0x4028c, nIndex=-4) returned 0x7fefc583b20 [0178.443] SetWindowLongPtrW (hWnd=0x4028c, nIndex=-4, dwNewLong=0x1ae81f6c) returned 0x7fefc583b20 [0178.443] GetWindowLongPtrW (hWnd=0x4028c, nIndex=-4) returned 0x1ae81f6c [0178.443] GetWindowLongPtrW (hWnd=0x4028c, nIndex=-16) returned 0x4601000b [0178.443] GetWindowLongPtrW (hWnd=0x4028c, nIndex=-12) returned 0x0 [0178.443] SetWindowLongPtrW (hWnd=0x4028c, nIndex=-12, dwNewLong=0x4028c) returned 0x0 [0178.443] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x81, wParam=0x0, lParam=0x125f30) returned 0x1 [0178.444] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x83, wParam=0x0, lParam=0x125fe0) returned 0x0 [0178.444] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x1, wParam=0x0, lParam=0x125f10) returned 0x0 [0178.445] SendMessageW (hWnd=0x4028c, Msg=0x2055, wParam=0x4028c, lParam=0x3) returned 0x2 [0178.445] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0178.445] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0178.445] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0178.446] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0178.446] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0178.446] RedrawWindow (hWnd=0x2004a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0178.446] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0178.446] RedrawWindow (hWnd=0x20048, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0178.446] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0178.446] RedrawWindow (hWnd=0x4028c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0178.446] RedrawWindow (hWnd=0x2010a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0178.446] GetWindow (hWnd=0x4028c, uCmd=0x3) returned 0x20048 [0178.446] GetClientRect (in: hWnd=0x4028c, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.446] GetWindowRect (in: hWnd=0x4028c, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.446] GetParent (hWnd=0x4028c) returned 0x2010a [0178.446] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125920, cPoints=0x2 | out: lpPoints=0x125920) returned -24707573 [0178.447] SetWindowTextW (hWnd=0x4028c, lpString="&Details") returned 1 [0178.447] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0xc, wParam=0x0, lParam=0x2796564) returned 0x1 [0178.447] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0 [0178.447] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x3, wParam=0x0, lParam=0x5e0008) returned 0x0 [0178.447] GetClientRect (in: hWnd=0x4028c, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.447] GetWindowRect (in: hWnd=0x4028c, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.448] GetParent (hWnd=0x4028c) returned 0x2010a [0178.448] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125a50, cPoints=0x2 | out: lpPoints=0x125a50) returned -24707573 [0178.448] SendMessageW (hWnd=0x4028c, Msg=0x2210, wParam=0x28c0001, lParam=0x4028c) returned 0x0 [0178.448] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x2210, wParam=0x28c0001, lParam=0x4028c) returned 0x0 [0178.448] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.448] GetParent (hWnd=0x4028c) returned 0x2010a [0178.448] GetCurrentActCtx (in: lphActCtx=0x126870 | out: lphActCtx=0x126870*=0xfa4ea8) returned 1 [0178.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.449] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.449] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="&Continue", dwStyle=0x5601000b, X=225, Y=94, nWidth=100, nHeight=23, hWndParent=0x2010a, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x20294 [0178.449] SetWindowLongPtrW (hWnd=0x20294, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1ae81f1c [0178.449] GetWindowLongPtrW (hWnd=0x20294, nIndex=-4) returned 0x7fefc583b20 [0178.451] SetWindowLongPtrW (hWnd=0x20294, nIndex=-4, dwNewLong=0x1ae91ccc) returned 0x7fefc583b20 [0178.451] GetWindowLongPtrW (hWnd=0x20294, nIndex=-4) returned 0x1ae91ccc [0178.451] GetWindowLongPtrW (hWnd=0x20294, nIndex=-16) returned 0x4601000b [0178.451] GetWindowLongPtrW (hWnd=0x20294, nIndex=-12) returned 0x0 [0178.452] SetWindowLongPtrW (hWnd=0x20294, nIndex=-12, dwNewLong=0x20294) returned 0x0 [0178.452] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x81, wParam=0x0, lParam=0x125f30) returned 0x1 [0178.455] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x83, wParam=0x0, lParam=0x125fe0) returned 0x0 [0178.455] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x1, wParam=0x0, lParam=0x125f10) returned 0x0 [0178.455] SendMessageW (hWnd=0x20294, Msg=0x2055, wParam=0x20294, lParam=0x3) returned 0x2 [0178.456] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0178.456] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0178.456] GetWindow (hWnd=0x20294, uCmd=0x3) returned 0x4028c [0178.456] GetClientRect (in: hWnd=0x20294, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.456] GetWindowRect (in: hWnd=0x20294, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.456] GetParent (hWnd=0x20294) returned 0x2010a [0178.456] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125920, cPoints=0x2 | out: lpPoints=0x125920) returned -24707573 [0178.457] SetWindowTextW (hWnd=0x20294, lpString="&Continue") returned 1 [0178.457] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0xc, wParam=0x0, lParam=0x27963ac) returned 0x1 [0178.457] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0 [0178.457] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x3, wParam=0x0, lParam=0x5e00e1) returned 0x0 [0178.457] GetClientRect (in: hWnd=0x20294, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.457] GetWindowRect (in: hWnd=0x20294, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.457] GetParent (hWnd=0x20294) returned 0x2010a [0178.457] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125a50, cPoints=0x2 | out: lpPoints=0x125a50) returned -24707573 [0178.457] SendMessageW (hWnd=0x20294, Msg=0x2210, wParam=0x2940001, lParam=0x20294) returned 0x0 [0178.457] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x2210, wParam=0x2940001, lParam=0x20294) returned 0x0 [0178.457] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.457] GetParent (hWnd=0x20294) returned 0x2010a [0178.458] GetCurrentActCtx (in: lphActCtx=0x126870 | out: lphActCtx=0x126870*=0xfa4ea8) returned 1 [0178.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.459] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.459] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="&Quit", dwStyle=0x5601000b, X=330, Y=94, nWidth=100, nHeight=23, hWndParent=0x2010a, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x20296 [0178.459] SetWindowLongPtrW (hWnd=0x20296, nIndex=-4, dwNewLong=0x7fefc583b20) returned 0x1ae81f1c [0178.459] GetWindowLongPtrW (hWnd=0x20296, nIndex=-4) returned 0x7fefc583b20 [0178.460] SetWindowLongPtrW (hWnd=0x20296, nIndex=-4, dwNewLong=0x1ae91d4c) returned 0x7fefc583b20 [0178.460] GetWindowLongPtrW (hWnd=0x20296, nIndex=-4) returned 0x1ae91d4c [0178.460] GetWindowLongPtrW (hWnd=0x20296, nIndex=-16) returned 0x4601000b [0178.460] GetWindowLongPtrW (hWnd=0x20296, nIndex=-12) returned 0x0 [0178.460] SetWindowLongPtrW (hWnd=0x20296, nIndex=-12, dwNewLong=0x20296) returned 0x0 [0178.460] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x81, wParam=0x0, lParam=0x125f30) returned 0x1 [0178.460] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x83, wParam=0x0, lParam=0x125fe0) returned 0x0 [0178.460] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x1, wParam=0x0, lParam=0x125f10) returned 0x0 [0178.461] SendMessageW (hWnd=0x20296, Msg=0x2055, wParam=0x20296, lParam=0x3) returned 0x2 [0178.461] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0178.461] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0178.461] GetWindow (hWnd=0x20296, uCmd=0x3) returned 0x20294 [0178.461] GetClientRect (in: hWnd=0x20296, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.461] GetWindowRect (in: hWnd=0x20296, lpRect=0x125920 | out: lpRect=0x125920) returned 1 [0178.461] GetParent (hWnd=0x20296) returned 0x2010a [0178.461] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125920, cPoints=0x2 | out: lpPoints=0x125920) returned -24707573 [0178.462] SetWindowTextW (hWnd=0x20296, lpString="&Quit") returned 1 [0178.462] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0xc, wParam=0x0, lParam=0x2796444) returned 0x1 [0178.462] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x5, wParam=0x0, lParam=0x170064) returned 0x0 [0178.462] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x3, wParam=0x0, lParam=0x5e014a) returned 0x0 [0178.462] GetClientRect (in: hWnd=0x20296, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.462] GetWindowRect (in: hWnd=0x20296, lpRect=0x125a50 | out: lpRect=0x125a50) returned 1 [0178.462] GetParent (hWnd=0x20296) returned 0x2010a [0178.462] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125a50, cPoints=0x2 | out: lpPoints=0x125a50) returned -24707573 [0178.462] SendMessageW (hWnd=0x20296, Msg=0x2210, wParam=0x2960001, lParam=0x20296) returned 0x0 [0178.462] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x2210, wParam=0x2960001, lParam=0x20296) returned 0x0 [0178.462] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.463] GetParent (hWnd=0x20296) returned 0x2010a [0178.463] GetCurrentActCtx (in: lphActCtx=0x126830 | out: lphActCtx=0x126830*=0xfa4ea8) returned 1 [0178.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0178.463] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2799dd0 | out: lpWndClass=0x2799dd0) returned 1 [0178.464] CoTaskMemAlloc (cb=0x54) returned 0x1cc74700 [0178.464] RegisterClassW (lpWndClass=0x126510) returned 0xc176 [0178.464] CoTaskMemFree (pv=0x1cc74700) [0178.464] GetModuleHandleW (lpModuleName=0x0) returned 0x1290000 [0178.465] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.Net.WebException: The remote name could not be resolved: 'fairybreathes.6te.net'\r\n at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request)\r\n at System.Net.WebClient.DownloadString(Uri address)\r\n at hyBrDFjOidLuty.Form1.startAction()\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nhyBrDFjOidLuty\r\n Assembly Version: 1.0.1.0\r\n Win32 Version: 0.2.0.2\r\n CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/hyBrDFjOidLuty.exe\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n", dwStyle=0x563008c4, X=8, Y=125, nWidth=422, nHeight=154, hWndParent=0x2010a, hMenu=0x0, hInstance=0x1290000, lpParam=0x0) returned 0x20288 [0178.466] SetWindowLongPtrW (hWnd=0x20288, nIndex=-4, dwNewLong=0x7fefc58975c) returned 0x1ae91d9c [0178.466] GetWindowLongPtrW (hWnd=0x20288, nIndex=-4) returned 0x7fefc58975c [0178.466] SetWindowLongPtrW (hWnd=0x20288, nIndex=-4, dwNewLong=0x1ae91dec) returned 0x7fefc58975c [0178.466] GetWindowLongPtrW (hWnd=0x20288, nIndex=-4) returned 0x1ae91dec [0178.466] GetWindowLongPtrW (hWnd=0x20288, nIndex=-16) returned 0x463008c4 [0178.466] GetWindowLongPtrW (hWnd=0x20288, nIndex=-12) returned 0x0 [0178.466] SetWindowLongPtrW (hWnd=0x20288, nIndex=-12, dwNewLong=0x20288) returned 0x0 [0178.466] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x81, wParam=0x0, lParam=0x125ef0) returned 0x1 [0178.467] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x83, wParam=0x0, lParam=0x125fa0) returned 0x0 [0178.475] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x1, wParam=0x0, lParam=0x125f40) returned 0x1 [0178.487] GetWindow (hWnd=0x20288, uCmd=0x3) returned 0x20296 [0178.487] GetClientRect (in: hWnd=0x20288, lpRect=0x1259b0 | out: lpRect=0x1259b0) returned 1 [0178.487] GetWindowRect (in: hWnd=0x20288, lpRect=0x1259b0 | out: lpRect=0x1259b0) returned 1 [0178.487] GetParent (hWnd=0x20288) returned 0x2010a [0178.487] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x1259b0, cPoints=0x2 | out: lpPoints=0x1259b0) returned -24707573 [0178.488] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0178.488] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0178.488] GetSystemMetrics (nIndex=42) returned 0 [0178.488] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125690, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0178.488] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125690) returned 0x18 [0178.489] SendMessageW (hWnd=0x20288, Msg=0x30, wParam=0x350a09d8, lParam=0x0) returned 0x1 [0178.489] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x30, wParam=0x350a09d8, lParam=0x0) returned 0x1 [0178.512] SetWindowTextW (hWnd=0x20288, lpString="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.Net.WebException: The remote name could not be resolved: 'fairybreathes.6te.net'\r\n at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request)\r\n at System.Net.WebClient.DownloadString(Uri address)\r\n at hyBrDFjOidLuty.Form1.startAction()\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nhyBrDFjOidLuty\r\n Assembly Version: 1.0.1.0\r\n Win32 Version: 0.2.0.2\r\n CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/hyBrDFjOidLuty.exe\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n") returned 1 [0178.512] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xc, wParam=0x0, lParam=0x27929e4) returned 0x1 [0178.514] GetSystemMetrics (nIndex=5) returned 1 [0178.514] GetSystemMetrics (nIndex=6) returned 1 [0178.514] SendMessageW (hWnd=0x20288, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0178.514] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0178.515] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x5, wParam=0x0, lParam=0x850191) returned 0x1 [0178.515] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x3, wParam=0x0, lParam=0x7f000a) returned 0x0 [0178.515] GetClientRect (in: hWnd=0x20288, lpRect=0x125a70 | out: lpRect=0x125a70) returned 1 [0178.515] GetWindowRect (in: hWnd=0x20288, lpRect=0x125a70 | out: lpRect=0x125a70) returned 1 [0178.515] GetParent (hWnd=0x20288) returned 0x2010a [0178.515] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2010a, lpPoints=0x125a70, cPoints=0x2 | out: lpPoints=0x125a70) returned -24707573 [0178.515] SendMessageW (hWnd=0x20288, Msg=0x2210, wParam=0x2880001, lParam=0x20288) returned 0x0 [0178.515] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x2210, wParam=0x2880001, lParam=0x20288) returned 0x0 [0178.515] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0178.516] GetParent (hWnd=0x20288) returned 0x2010a [0178.516] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-8) returned 0x0 [0178.516] GetCursorPos (in: lpPoint=0x279a4c8 | out: lpPoint=0x279a4c8*(x=292, y=879)) returned 1 [0178.516] MonitorFromPoint (pt=0x30d0000028e, dwFlags=0x2) returned 0x10001 [0178.516] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126690 | out: lpmi=0x126690) returned 1 [0178.516] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5f010787 [0178.516] GetDeviceCaps (hdc=0x5f010787, index=12) returned 32 [0178.516] GetDeviceCaps (hdc=0x5f010787, index=14) returned 1 [0178.516] DeleteDC (hdc=0x5f010787) returned 1 [0178.517] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x126760 | out: lpmi=0x126760) returned 1 [0178.517] GetWindowThreadProcessId (in: hWnd=0x2010a, lpdwProcessId=0x1268b0 | out: lpdwProcessId=0x1268b0) returned 0x408 [0178.517] GetCurrentThreadId () returned 0x408 [0178.518] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc177 [0178.518] PostMessageW (hWnd=0x2010a, Msg=0xc177, wParam=0x0, lParam=0x0) returned 1 [0178.518] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0178.518] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0178.518] GetSystemMetrics (nIndex=42) returned 0 [0178.518] GetWindowTextW (in: hWnd=0x2010a, lpString=0x126790, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0178.518] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x126790) returned 0x18 [0178.520] GdipImageGetFrameDimensionsCount (image=0x1aff7460, count=0x1267d0) returned 0x0 [0178.520] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1cc78d20 [0178.520] GdipImageGetFrameDimensionsList (image=0x1aff7460, dimensionIDs=0x1cc78d20*(Data1=0x6e0008, Data2=0x6b, Data3=0x6e, Data4=([0]=0x6f, [1]=0x0, [2]=0x77, [3]=0x0, [4]=0x6e, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0178.521] LocalFree (hMem=0x1cc78d20) returned 0x0 [0178.524] GdipImageGetFrameDimensionsCount (image=0x1aff7c60, count=0x1267d0) returned 0x0 [0178.524] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x1cc78d40 [0178.524] GdipImageGetFrameDimensionsList (image=0x1aff7c60, dimensionIDs=0x1cc78d40*(Data1=0x550c000a, Data2=0x726e, Data3=0x7365, Data4=([0]=0x74, [1]=0x72, [2]=0x69, [3]=0x63, [4]=0x74, [5]=0x65, [6]=0x64, [7]=0x1)), count=0x1) returned 0x0 [0178.524] LocalFree (hMem=0x1cc78d40) returned 0x0 [0178.524] SystemParametersInfoW (in: uiAction=0x5f, uiParam=0x0, pvParam=0x1269e0, fWinIni=0x0 | out: pvParam=0x1269e0) returned 1 [0178.525] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x126fc0) returned 0x0 [0178.528] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.529] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.529] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.529] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.530] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126bb8 | out: lpwndpl=0x126bb8) returned 1 [0178.530] GetClientRect (in: hWnd=0x2010a, lpRect=0x126ad0 | out: lpRect=0x126ad0) returned 1 [0178.530] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0178.530] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0178.531] GetSystemMetrics (nIndex=42) returned 0 [0178.531] GetWindowTextW (in: hWnd=0x2010a, lpString=0x126810, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0178.531] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x126810) returned 0x18 [0178.531] GetClientRect (in: hWnd=0x2010a, lpRect=0x1268b8 | out: lpRect=0x1268b8) returned 1 [0178.531] GetCurrentObject (hdc=0x370101ca, type=0x1) returned 0x1b00017 [0178.531] GetCurrentObject (hdc=0x370101ca, type=0x2) returned 0x1900010 [0178.531] GetCurrentObject (hdc=0x370101ca, type=0x7) returned 0x1050032 [0178.531] GetCurrentObject (hdc=0x370101ca, type=0x6) returned 0x18a002e [0178.531] SaveDC (hdc=0x370101ca) returned 1 [0178.531] GetNearestColor (hdc=0x370101ca, color=0xf0f0f0) returned 0xf0f0f0 [0178.531] CreateSolidBrush (color=0xf0f0f0) returned 0x151009ab [0178.531] FillRect (hDC=0x370101ca, lprc=0x1265a8, hbr=0x151009ab) returned 1 [0178.531] DeleteObject (ho=0x151009ab) returned 1 [0178.531] RestoreDC (hdc=0x370101ca, nSavedDC=-1) returned 1 [0178.532] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.532] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.532] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.533] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x14, wParam=0x370101ca, lParam=0x0) returned 0x1 [0178.533] GetStockObject (i=5) returned 0x1900015 [0178.533] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.533] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x14, wParam=0x370101ca, lParam=0x0) returned 0x1 [0178.533] GetStockObject (i=5) returned 0x1900015 [0178.534] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0178.534] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x14, wParam=0x370101ca, lParam=0x0) returned 0x1 [0178.534] GetStockObject (i=5) returned 0x1900015 [0178.534] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126b98 | out: lpwndpl=0x126b98) returned 1 [0178.534] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x47, wParam=0x0, lParam=0x126fc0) returned 0x0 [0178.534] GetClientRect (in: hWnd=0x2010a, lpRect=0x126a30 | out: lpRect=0x126a30) returned 1 [0178.534] GetWindowRect (in: hWnd=0x2010a, lpRect=0x126a30 | out: lpRect=0x126a30) returned 1 [0178.535] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.535] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.535] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.535] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x5, wParam=0x0, lParam=0x7d01b6) returned 0x0 [0178.535] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x3, wParam=0x0, lParam=0x17a01f5) returned 0x0 [0178.535] GetClientRect (in: hWnd=0x2010a, lpRect=0x126ac0 | out: lpRect=0x126ac0) returned 1 [0178.535] GetWindowRect (in: hWnd=0x2010a, lpRect=0x126ac0 | out: lpRect=0x126ac0) returned 1 [0178.585] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0178.585] InvalidateRect (hWnd=0x4028c, lpRect=0x0, bErase=0) returned 1 [0178.585] GetFocus () returned 0x2010a [0178.585] GetFocus () returned 0x2010a [0178.585] SetFocus (hWnd=0x4028c) returned 0x2010a [0178.586] GetFocus () returned 0x4028c [0178.586] IsChild (hWndParent=0x2010a, hWnd=0x4028c) returned 1 [0178.586] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x8, wParam=0x4028c, lParam=0x0) returned 0x0 [0178.586] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0178.587] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0178.587] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0178.587] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x7, wParam=0x2010a, lParam=0x0) returned 0x0 [0178.587] GetStockObject (i=5) returned 0x1900015 [0178.587] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0178.588] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0xd, wParam=0x9, lParam=0x1cc78d60) returned 0x8 [0178.588] GetDlgItem (hDlg=0x2010a, nIDDlgItem=262796) returned 0x4028c [0178.588] SendMessageW (hWnd=0x4028c, Msg=0x202b, wParam=0x4028c, lParam=0x1264b0) returned 0x0 [0178.588] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x202b, wParam=0x4028c, lParam=0x1264b0) returned 0x0 [0178.589] InvalidateRect (hWnd=0x4028c, lpRect=0x0, bErase=0) returned 1 [0178.589] GetFocus () returned 0x4028c [0178.589] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0178.589] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0178.590] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0178.590] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0178.592] IsWindowUnicode (hWnd=0x20298) returned 1 [0178.592] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0178.593] TranslateMessage (lpMsg=0x127140) returned 0 [0178.594] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0178.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", nBufferLength=0x105, lpBuffer=0x1264e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpFilePart=0x0) returned 0x38 [0178.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", nBufferLength=0x105, lpBuffer=0x126350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpFilePart=0x0) returned 0x38 [0178.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", nBufferLength=0x105, lpBuffer=0x126460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpFilePart=0x0) returned 0x38 [0178.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1268a0) returned 1 [0178.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hybrdfjoidluty.exe"), fInfoLevelId=0x0, lpFileInformation=0x126980 | out: lpFileInformation=0x126980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb3bcc40, ftCreationTime.dwHighDateTime=0x1d69743, ftLastAccessTime.dwLowDateTime=0xeb3bcc40, ftLastAccessTime.dwHighDateTime=0x1d69743, ftLastWriteTime.dwLowDateTime=0xeb3e2da0, ftLastWriteTime.dwHighDateTime=0x1d69743, nFileSizeHigh=0x0, nFileSizeLow=0x5200)) returned 1 [0178.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x126860) returned 1 [0178.972] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", lpdwHandle=0x126a58 | out: lpdwHandle=0x126a58) returned 0x754 [0178.973] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\hyBrDFjOidLuty.exe", dwHandle=0x0, dwLen=0x754, lpData=0x279cc80 | out: lpData=0x279cc80) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1269d8, puLen=0x1269d0 | out: lplpBuffer=0x1269d8*=0x279cd1c, puLen=0x1269d0) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cdbc, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279ce04, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279ce40, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279ce70, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cebc, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cf54, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cf9c, puLen=0x126970) returned 1 [0178.973] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cfe0, puLen=0x126970) returned 1 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cd74, puLen=0x126970) returned 1 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cf08, puLen=0x126970) returned 1 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x0, puLen=0x126970) returned 0 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x0, puLen=0x126970) returned 0 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x126928, puLen=0x126920 | out: lplpBuffer=0x126928*=0x279cd1c, puLen=0x126920) returned 1 [0178.974] VerLanguageNameW (in: wLang=0x0, szLang=0x126650, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0178.974] VerQueryValueW (in: pBlock=0x279cc80, lpSubBlock="\\", lplpBuffer=0x126978, puLen=0x126970 | out: lplpBuffer=0x126978*=0x279cca8, puLen=0x126970) returned 1 [0178.974] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\TODO: \\TODO: \\0.2.0.2", ulOptions=0x0, samDesired=0x20019, phkResult=0x126a68 | out: phkResult=0x126a68*=0x0) returned 0x2 [0178.990] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0178.990] GetCurrentThreadId () returned 0x408 [0179.090] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.090] GetCurrentThreadId () returned 0x408 [0179.093] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.093] GetCurrentThreadId () returned 0x408 [0179.100] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.100] GetCurrentThreadId () returned 0x408 [0179.100] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.100] GetCurrentThreadId () returned 0x408 [0179.101] LocalFree (hMem=0x1035680) returned 0x0 [0179.101] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x201a, wParam=0x18, lParam=0x1035680) returned 0x0 [0179.101] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.101] IsWindowUnicode (hWnd=0x20298) returned 1 [0179.101] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.102] TranslateMessage (lpMsg=0x127140) returned 0 [0179.102] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.102] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.102] GetCurrentThreadId () returned 0x408 [0179.102] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.102] GetCurrentThreadId () returned 0x408 [0179.102] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.102] GetCurrentThreadId () returned 0x408 [0179.102] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.102] GetCurrentThreadId () returned 0x408 [0179.102] GetWindowThreadProcessId (in: hWnd=0x5015e, lpdwProcessId=0x126aa0 | out: lpdwProcessId=0x126aa0) returned 0x408 [0179.102] GetCurrentThreadId () returned 0x408 [0179.102] LocalFree (hMem=0x10356a0) returned 0x0 [0179.103] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x201a, wParam=0x18, lParam=0x10356a0) returned 0x0 [0179.103] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.103] IsWindowUnicode (hWnd=0x2010a) returned 1 [0179.103] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.103] TranslateMessage (lpMsg=0x127140) returned 0 [0179.103] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.104] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.104] IsWindowUnicode (hWnd=0x2010a) returned 1 [0179.104] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.104] TranslateMessage (lpMsg=0x127140) returned 0 [0179.104] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.104] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xc091, wParam=0x0, lParam=0x0) returned 0x0 [0179.104] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.104] GetMessageA (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.104] TranslateMessage (lpMsg=0x127140) returned 0 [0179.105] DispatchMessageA (lpMsg=0x127140) returned 0x0 [0179.105] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.105] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.105] IsWindowUnicode (hWnd=0x20294) returned 1 [0179.105] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.105] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.106] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0179.106] SetCursor (hCursor=0x10003) returned 0x10007 [0179.107] TranslateMessage (lpMsg=0x127140) returned 0 [0179.107] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.110] _TrackMouseEvent (in: lpEventTrack=0x27a05c8 | out: lpEventTrack=0x27a05c8) returned 1 [0179.110] SendMessageW (hWnd=0x20294, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0179.110] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0179.117] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0179.118] GetKeyState (nVirtKey=2) returned 0 [0179.118] GetKeyState (nVirtKey=4) returned 0 [0179.118] GetKeyState (nVirtKey=5) returned 0 [0179.118] GetKeyState (nVirtKey=6) returned 0 [0179.118] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.118] IsWindowUnicode (hWnd=0x2010a) returned 1 [0179.118] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.118] TranslateMessage (lpMsg=0x127140) returned 0 [0179.118] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.118] BeginPaint (in: hWnd=0x2010a, lpPaint=0x126878 | out: lpPaint=0x126878) returned 0x370101ca [0179.119] SelectPalette (hdc=0x370101ca, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0179.119] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.119] GetSystemMetrics (nIndex=42) returned 0 [0179.119] GetWindowTextW (in: hWnd=0x2010a, lpString=0x1266f0, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.119] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x1266f0) returned 0x18 [0179.119] SelectPalette (hdc=0x370101ca, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0179.119] EndPaint (hWnd=0x2010a, lpPaint=0x126818) returned 1 [0179.119] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.119] IsWindowUnicode (hWnd=0x2004a) returned 1 [0179.119] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.119] TranslateMessage (lpMsg=0x127140) returned 0 [0179.120] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.120] BeginPaint (in: hWnd=0x2004a, lpPaint=0x1268b8 | out: lpPaint=0x1268b8) returned 0x20109b2 [0179.120] SelectPalette (hdc=0x20109b2, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0179.121] CreateCompatibleDC (hdc=0x20109b2) returned 0xffffffffb401068c [0179.122] GetObjectType (h=0x20109b2) returned 0x3 [0179.122] CreateCompatibleBitmap (hdc=0x20109b2, cx=1, cy=1) returned 0xffffffffcc0506aa [0179.122] GetDIBits (in: hdc=0x20109b2, hbm=0xffffffffcc0506aa, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x126248, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126248) returned 1 [0179.122] GetDIBits (in: hdc=0x20109b2, hbm=0xffffffffcc0506aa, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x126248, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126248) returned 1 [0179.123] DeleteObject (ho=0xffffffffcc0506aa) returned 1 [0179.123] CreateDIBSection (in: hdc=0x20109b2, lpbmi=0x1262f8, usage=0x0, ppvBits=0x1268b8, hSection=0x0, offset=0x0 | out: ppvBits=0x1268b8) returned 0x2f050213 [0179.123] SelectObject (hdc=0xffffffffb401068c, h=0x2f050213) returned 0x185000f [0179.123] GdipCreateFromHDC (hdc=0xffffffffb401068c, graphics=0x126838) returned 0x0 [0179.124] GdipTranslateWorldTransform (graphics=0x1bae4090, dx=0x7fef12fdf12, dy=0xda1eac199dbf, order=0x0) returned 0x0 [0179.126] GdipSetClipRectI (graphics=0x1bae4090, x=0, y=0, width=64, height=64, combineMode=0x0) returned 0x0 [0179.134] GdipCreateMatrix (matrix=0x126860) returned 0x0 [0179.134] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1afff050) returned 0x0 [0179.135] GdipIsMatrixIdentity (matrix=0x1afff050, result=0x1268c8) returned 0x0 [0179.135] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.136] GdipGetMatrixElements (matrix=0x1afff050, matrixOut=0x1cc560b0) returned 0x0 [0179.136] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.136] GdipDeleteMatrix (matrix=0x1afff050) returned 0x0 [0179.137] GdipCreateRegion (region=0x126860) returned 0x0 [0179.137] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.138] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x1268c0) returned 0x0 [0179.138] GdipSaveGraphics (graphics=0x1bae4090, state=0x126960) returned 0x0 [0179.139] GetWindowTextLengthW (hWnd=0x2004a) returned 0 [0179.139] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0179.139] GetSystemMetrics (nIndex=42) returned 0 [0179.139] GetWindowTextW (in: hWnd=0x2004a, lpString=0x126760, nMaxCount=1 | out: lpString="") returned 0 [0179.139] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xd, wParam=0x1, lParam=0x126760) returned 0x0 [0179.139] GetClientRect (in: hWnd=0x2004a, lpRect=0x126908 | out: lpRect=0x126908) returned 1 [0179.140] GdipCreateRegion (region=0x1264f0) returned 0x0 [0179.140] GdipGetClip (graphics=0x1bae4090, region=0x1af5bd80) returned 0x0 [0179.140] GdipCreateMatrix (matrix=0x1264f0) returned 0x0 [0179.140] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1af5be40) returned 0x0 [0179.140] GdipIsMatrixIdentity (matrix=0x1af5be40, result=0x126558) returned 0x0 [0179.140] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.140] GdipGetMatrixElements (matrix=0x1af5be40, matrixOut=0x1cc560b0) returned 0x0 [0179.141] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.142] GdipCombineRegionRegion (region=0x1af5bd80, region2=0x1aff85f0, combineMode=0x1) returned 0x0 [0179.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.142] GdipGetMatrixElements (matrix=0x1af5be40, matrixOut=0x1cc560b0) returned 0x0 [0179.142] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.142] GdipDeleteMatrix (matrix=0x1af5be40) returned 0x0 [0179.142] GdipIsInfiniteRegion (region=0x1af5bd80, graphics=0x1bae4090, result=0x1265c0) returned 0x0 [0179.142] GdipIsInfiniteRegion (region=0x1af5bd80, graphics=0x1bae4090, result=0x126580) returned 0x0 [0179.143] GdipGetRegionHRgn (region=0x1af5bd80, graphics=0x1bae4090, hRgn=0x126580) returned 0x0 [0179.143] GdipDeleteRegion (region=0x1af5bd80) returned 0x0 [0179.144] GdipGetDC (graphics=0x1bae4090, hdc=0x1265c8) returned 0x0 [0179.144] GetCurrentObject (hdc=0xffffffffb401068c, type=0x1) returned 0x1b00017 [0179.144] GetCurrentObject (hdc=0xffffffffb401068c, type=0x2) returned 0x1900010 [0179.144] GetCurrentObject (hdc=0xffffffffb401068c, type=0x7) returned 0x2f050213 [0179.144] GetCurrentObject (hdc=0xffffffffb401068c, type=0x6) returned 0x18a002e [0179.144] SaveDC (hdc=0xffffffffb401068c) returned 1 [0179.145] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x500409db [0179.145] GetClipRgn (hdc=0xffffffffb401068c, hrgn=0x500409db) returned 0 [0179.145] SelectClipRgn (hdc=0xffffffffb401068c, hrgn=0xffffffff8f0407ab) returned 2 [0179.146] DeleteObject (ho=0x500409db) returned 1 [0179.146] DeleteObject (ho=0xffffffff8f0407ab) returned 1 [0179.146] OffsetViewportOrgEx (in: hdc=0xffffffffb401068c, x=0, y=0, lppt=0x27a2020 | out: lppt=0x27a2020) returned 1 [0179.146] GetNearestColor (hdc=0xffffffffb401068c, color=0xf0f0f0) returned 0xf0f0f0 [0179.146] CreateSolidBrush (color=0xf0f0f0) returned 0x161009ab [0179.146] FillRect (hDC=0xffffffffb401068c, lprc=0x1265f8, hbr=0x161009ab) returned 1 [0179.147] DeleteObject (ho=0x161009ab) returned 1 [0179.147] RestoreDC (hdc=0xffffffffb401068c, nSavedDC=-1) returned 1 [0179.148] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb401068c) returned 0x0 [0179.149] GdipRestoreGraphics (graphics=0x1bae4090, state=0xfffffffffdb40dbd) returned 0x0 [0179.149] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.149] GetWindowTextLengthW (hWnd=0x2004a) returned 0 [0179.149] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0179.149] GetSystemMetrics (nIndex=42) returned 0 [0179.149] GetWindowTextW (in: hWnd=0x2004a, lpString=0x126760, nMaxCount=1 | out: lpString="") returned 0 [0179.149] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xd, wParam=0x1, lParam=0x126760) returned 0x0 [0179.149] GdipGetImageWidth (image=0x1aff7460, width=0x126798) returned 0x0 [0179.150] GdipGetImageHeight (image=0x1aff7460, height=0x126798) returned 0x0 [0179.150] GdipGetImageWidth (image=0x1aff7460, width=0x126758) returned 0x0 [0179.150] GdipGetImageHeight (image=0x1aff7460, height=0x126758) returned 0x0 [0179.151] GdipDrawImageRectI (graphics=0x1bae4090, image=0x1aff7460, x=16, y=16, width=32, height=32) returned 0x0 [0179.152] GdipGetDC (graphics=0x1bae4090, hdc=0x126878) returned 0x0 [0179.153] BitBlt (hdc=0x20109b2, x=0, y=0, cx=64, cy=64, hdcSrc=0xffffffffb401068c, x1=0, y1=0, rop=0xcc0020) returned 1 [0179.153] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb401068c) returned 0x0 [0179.153] SelectPalette (hdc=0x20109b2, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0179.153] SelectObject (hdc=0xffffffffb401068c, h=0x185000f) returned 0x2f050213 [0179.154] DeleteDC (hdc=0xffffffffb401068c) returned 1 [0179.154] GdipDeleteGraphics (graphics=0x1bae4090) returned 0x0 [0179.154] EndPaint (hWnd=0x2004a, lpPaint=0x126858) returned 1 [0179.154] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.154] IsWindowUnicode (hWnd=0x20048) returned 1 [0179.154] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.154] TranslateMessage (lpMsg=0x127140) returned 0 [0179.154] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.154] BeginPaint (in: hWnd=0x20048, lpPaint=0x126838 | out: lpPaint=0x126838) returned 0x370101ca [0179.154] SelectPalette (hdc=0x370101ca, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0179.154] CreateCompatibleDC (hdc=0x370101ca) returned 0xffffffffb601068c [0179.154] GetObjectType (h=0x370101ca) returned 0x3 [0179.155] CreateCompatibleBitmap (hdc=0x370101ca, cx=1, cy=1) returned 0x2a050688 [0179.155] GetDIBits (in: hdc=0x370101ca, hbm=0x2a050688, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x126148, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126148) returned 1 [0179.155] GetDIBits (in: hdc=0x370101ca, hbm=0x2a050688, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x126148, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126148) returned 1 [0179.155] DeleteObject (ho=0x2a050688) returned 1 [0179.155] CreateDIBSection (in: hdc=0x370101ca, lpbmi=0x1261f8, usage=0x0, ppvBits=0x1267b8, hSection=0x0, offset=0x0 | out: ppvBits=0x1267b8) returned 0x2905065f [0179.155] SelectObject (hdc=0xffffffffb601068c, h=0x2905065f) returned 0x185000f [0179.155] GdipCreateFromHDC (hdc=0xffffffffb601068c, graphics=0x126738) returned 0x0 [0179.155] GdipTranslateWorldTransform (graphics=0x1bae4090, dx=0x7fef12fdf12, dy=0xda1eac199dbf, order=0x0) returned 0x0 [0179.155] GdipSetClipRectI (graphics=0x1bae4090, x=0, y=0, width=354, height=68, combineMode=0x0) returned 0x0 [0179.156] GdipCreateMatrix (matrix=0x1267e0) returned 0x0 [0179.156] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1afff050) returned 0x0 [0179.156] GdipIsMatrixIdentity (matrix=0x1afff050, result=0x126848) returned 0x0 [0179.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.156] GdipGetMatrixElements (matrix=0x1afff050, matrixOut=0x1cc560b0) returned 0x0 [0179.156] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.156] GdipDeleteMatrix (matrix=0x1afff050) returned 0x0 [0179.156] GdipCreateRegion (region=0x1267e0) returned 0x0 [0179.156] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.156] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x126840) returned 0x0 [0179.156] GdipSaveGraphics (graphics=0x1bae4090, state=0x1268e0) returned 0x0 [0179.156] GetWindowTextLengthW (hWnd=0x20048) returned 266 [0179.156] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10a [0179.156] GetSystemMetrics (nIndex=42) returned 0 [0179.157] CoTaskMemAlloc (cb=0x21a) returned 0x106c760 [0179.157] GetWindowTextW (in: hWnd=0x20048, lpString=0x106c760, nMaxCount=267 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.") returned 266 [0179.157] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x10b, lParam=0x106c760) returned 0x10a [0179.157] CoTaskMemFree (pv=0x106c760) [0179.157] GetClientRect (in: hWnd=0x20048, lpRect=0x126888 | out: lpRect=0x126888) returned 1 [0179.157] GdipCreateRegion (region=0x126470) returned 0x0 [0179.157] GdipGetClip (graphics=0x1bae4090, region=0x1af5bd80) returned 0x0 [0179.157] GdipCreateMatrix (matrix=0x126470) returned 0x0 [0179.157] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1af5be40) returned 0x0 [0179.157] GdipIsMatrixIdentity (matrix=0x1af5be40, result=0x1264d8) returned 0x0 [0179.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.157] GdipGetMatrixElements (matrix=0x1af5be40, matrixOut=0x1cc560b0) returned 0x0 [0179.157] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.158] GdipCombineRegionRegion (region=0x1af5bd80, region2=0x1aff85f0, combineMode=0x1) returned 0x0 [0179.158] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc560b0 [0179.158] GdipGetMatrixElements (matrix=0x1af5be40, matrixOut=0x1cc560b0) returned 0x0 [0179.158] LocalFree (hMem=0x1cc560b0) returned 0x0 [0179.158] GdipDeleteMatrix (matrix=0x1af5be40) returned 0x0 [0179.158] GdipIsInfiniteRegion (region=0x1af5bd80, graphics=0x1bae4090, result=0x126540) returned 0x0 [0179.158] GdipIsInfiniteRegion (region=0x1af5bd80, graphics=0x1bae4090, result=0x126500) returned 0x0 [0179.158] GdipGetRegionHRgn (region=0x1af5bd80, graphics=0x1bae4090, hRgn=0x126500) returned 0x0 [0179.158] GdipDeleteRegion (region=0x1af5bd80) returned 0x0 [0179.158] GdipGetDC (graphics=0x1bae4090, hdc=0x126548) returned 0x0 [0179.158] GetCurrentObject (hdc=0xffffffffb601068c, type=0x1) returned 0x1b00017 [0179.158] GetCurrentObject (hdc=0xffffffffb601068c, type=0x2) returned 0x1900010 [0179.158] GetCurrentObject (hdc=0xffffffffb601068c, type=0x7) returned 0x2905065f [0179.158] GetCurrentObject (hdc=0xffffffffb601068c, type=0x6) returned 0x18a002e [0179.158] SaveDC (hdc=0xffffffffb601068c) returned 1 [0179.159] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff900407ab [0179.159] GetClipRgn (hdc=0xffffffffb601068c, hrgn=0xffffffff900407ab) returned 0 [0179.159] SelectClipRgn (hdc=0xffffffffb601068c, hrgn=0x510409db) returned 2 [0179.159] DeleteObject (ho=0xffffffff900407ab) returned 1 [0179.159] DeleteObject (ho=0x510409db) returned 1 [0179.159] OffsetViewportOrgEx (in: hdc=0xffffffffb601068c, x=0, y=0, lppt=0x27a3e28 | out: lppt=0x27a3e28) returned 1 [0179.159] GetNearestColor (hdc=0xffffffffb601068c, color=0xf0f0f0) returned 0xf0f0f0 [0179.159] CreateSolidBrush (color=0xf0f0f0) returned 0x171009ab [0179.159] FillRect (hDC=0xffffffffb601068c, lprc=0x126578, hbr=0x171009ab) returned 1 [0179.160] DeleteObject (ho=0x171009ab) returned 1 [0179.160] RestoreDC (hdc=0xffffffffb601068c, nSavedDC=-1) returned 1 [0179.160] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb601068c) returned 0x0 [0179.160] GdipRestoreGraphics (graphics=0x1bae4090, state=0xfffffffffdb20dbd) returned 0x0 [0179.160] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.160] GetWindowTextLengthW (hWnd=0x20048) returned 266 [0179.160] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10a [0179.161] GetSystemMetrics (nIndex=42) returned 0 [0179.161] CoTaskMemAlloc (cb=0x21a) returned 0x106c760 [0179.161] GetWindowTextW (in: hWnd=0x20048, lpString=0x106c760, nMaxCount=267 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.") returned 266 [0179.161] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x10b, lParam=0x106c760) returned 0x10a [0179.161] CoTaskMemFree (pv=0x106c760) [0179.161] GdipGetDC (graphics=0x1bae4090, hdc=0x1266d8) returned 0x0 [0179.161] GetCurrentObject (hdc=0xffffffffb601068c, type=0x1) returned 0x1b00017 [0179.161] GetCurrentObject (hdc=0xffffffffb601068c, type=0x2) returned 0x1900010 [0179.161] GetCurrentObject (hdc=0xffffffffb601068c, type=0x7) returned 0x2905065f [0179.161] GetCurrentObject (hdc=0xffffffffb601068c, type=0x6) returned 0x18a002e [0179.161] SaveDC (hdc=0xffffffffb601068c) returned 1 [0179.161] GetNearestColor (hdc=0xffffffffb601068c, color=0x0) returned 0x0 [0179.162] RestoreDC (hdc=0xffffffffb601068c, nSavedDC=-1) returned 1 [0179.162] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb601068c) returned 0x0 [0179.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefc4e0000 [0179.163] AdjustWindowRectEx (in: lpRect=0x126588, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x126588) returned 1 [0179.170] GdipGetFamilyName (in: family=0x1b49c5e0, name=0x1262d0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0179.171] CreateCompatibleDC (hdc=0x0) returned 0xffffffff81010666 [0179.171] GetCurrentObject (hdc=0xffffffff81010666, type=0x1) returned 0x1b00017 [0179.171] GetCurrentObject (hdc=0xffffffff81010666, type=0x2) returned 0x1900010 [0179.171] GetCurrentObject (hdc=0xffffffff81010666, type=0x7) returned 0x185000f [0179.171] GetCurrentObject (hdc=0xffffffff81010666, type=0x6) returned 0x18a002e [0179.171] SaveDC (hdc=0xffffffff81010666) returned 1 [0179.172] GetDeviceCaps (hdc=0xffffffff81010666, index=90) returned 96 [0179.173] CoTaskMemAlloc (cb=0x5c) returned 0x1cc38a60 [0179.173] CreateFontIndirectW (lplf=0x1cc38a60) returned 0x250a0684 [0179.173] CoTaskMemFree (pv=0x1cc38a60) [0179.173] GetObjectW (in: h=0x250a0684, c=92, pv=0x1262e0 | out: pv=0x1262e0) returned 92 [0179.178] GetCurrentObject (hdc=0xffffffff81010666, type=0x6) returned 0x18a002e [0179.178] GetObjectW (in: h=0x18a002e, c=92, pv=0x1260e0 | out: pv=0x1260e0) returned 92 [0179.179] SelectObject (hdc=0xffffffff81010666, h=0x250a0684) returned 0x18a002e [0179.181] GetMapMode (hdc=0xffffffff81010666) returned 1 [0179.181] GetTextMetricsW (in: hdc=0xffffffff81010666, lptm=0x1262f0 | out: lptm=0x1262f0) returned 1 [0179.183] DrawTextExW (in: hdc=0xffffffff81010666, lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.", cchText=266, lprc=0x1264f8, format=0x102400, lpdtp=0x27a50a0 | out: lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.", lprc=0x1264f8) returned 39 [0179.185] GdipGetTextRenderingHint (graphics=0x1bae4090, mode=0x1265e8) returned 0x0 [0179.185] GdipGetDC (graphics=0x1bae4090, hdc=0x1265c8) returned 0x0 [0179.185] GetCurrentObject (hdc=0xffffffffb601068c, type=0x1) returned 0x1b00017 [0179.186] GetCurrentObject (hdc=0xffffffffb601068c, type=0x2) returned 0x1900010 [0179.186] GetCurrentObject (hdc=0xffffffffb601068c, type=0x7) returned 0x2905065f [0179.186] GetCurrentObject (hdc=0xffffffffb601068c, type=0x6) returned 0x18a002e [0179.186] SaveDC (hdc=0xffffffffb601068c) returned 1 [0179.188] GetTextAlign (hdc=0xffffffffb601068c) returned 0x0 [0179.189] GetTextColor (hdc=0xffffffffb601068c) returned 0x0 [0179.189] GetCurrentObject (hdc=0xffffffffb601068c, type=0x6) returned 0x18a002e [0179.189] GetObjectW (in: h=0x18a002e, c=92, pv=0x126100 | out: pv=0x126100) returned 92 [0179.189] SelectObject (hdc=0xffffffffb601068c, h=0x250a0684) returned 0x18a002e [0179.190] GetBkMode (hdc=0xffffffffb601068c) returned 2 [0179.190] SetBkMode (hdc=0xffffffffb601068c, mode=1) returned 2 [0179.190] DrawTextExW (in: hdc=0xffffffffb601068c, lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.", cchText=266, lprc=0x126558, format=0x102010, lpdtp=0x27a5488 | out: lpchText="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.", lprc=0x126558) returned 65 [0179.195] RestoreDC (hdc=0xffffffffb601068c, nSavedDC=-1) returned 1 [0179.195] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb601068c) returned 0x0 [0179.195] GdipGetDC (graphics=0x1bae4090, hdc=0x1267f8) returned 0x0 [0179.195] BitBlt (hdc=0x370101ca, x=0, y=0, cx=354, cy=68, hdcSrc=0xffffffffb601068c, x1=0, y1=0, rop=0xcc0020) returned 1 [0179.196] GdipReleaseDC (graphics=0x1bae4090, hdc=0xffffffffb601068c) returned 0x0 [0179.196] SelectPalette (hdc=0x370101ca, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0179.196] SelectObject (hdc=0xffffffffb601068c, h=0x185000f) returned 0x2905065f [0179.196] DeleteDC (hdc=0xffffffffb601068c) returned 1 [0179.196] GdipDeleteGraphics (graphics=0x1bae4090) returned 0x0 [0179.196] DeleteObject (ho=0x2905065f) returned 1 [0179.197] EndPaint (hWnd=0x20048, lpPaint=0x1267d8) returned 1 [0179.197] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.197] IsWindowUnicode (hWnd=0x4028c) returned 1 [0179.197] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.197] TranslateMessage (lpMsg=0x127140) returned 0 [0179.197] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.197] BeginPaint (in: hWnd=0x4028c, lpPaint=0x126808 | out: lpPaint=0x126808) returned 0x20109b2 [0179.197] SelectPalette (hdc=0x20109b2, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0179.197] CreateCompatibleDC (hdc=0x20109b2) returned 0x2d010688 [0179.197] DeleteObject (ho=0x2f050213) returned 1 [0179.197] GetObjectType (h=0x20109b2) returned 0x3 [0179.197] CreateCompatibleBitmap (hdc=0x20109b2, cx=1, cy=1) returned 0xffffffffce0506aa [0179.198] GetDIBits (in: hdc=0x20109b2, hbm=0xffffffffce0506aa, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x126198, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126198) returned 1 [0179.198] GetDIBits (in: hdc=0x20109b2, hbm=0xffffffffce0506aa, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x126198, usage=0x0 | out: lpvBits=0x0, lpbmi=0x126198) returned 1 [0179.198] DeleteObject (ho=0xffffffffce0506aa) returned 1 [0179.198] CreateDIBSection (in: hdc=0x20109b2, lpbmi=0x126248, usage=0x0, ppvBits=0x126808, hSection=0x0, offset=0x0 | out: ppvBits=0x126808) returned 0x30050213 [0179.198] SelectObject (hdc=0x2d010688, h=0x30050213) returned 0x185000f [0179.198] GdipCreateFromHDC (hdc=0x2d010688, graphics=0x126788) returned 0x0 [0179.198] GdipTranslateWorldTransform (graphics=0x1bae4090, dx=0x7fef12fdf12, dy=0xda1eac199dbf, order=0x0) returned 0x0 [0179.198] GdipSetClipRectI (graphics=0x1bae4090, x=0, y=0, width=100, height=23, combineMode=0x0) returned 0x0 [0179.198] GdipCreateMatrix (matrix=0x1267b0) returned 0x0 [0179.199] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1afff050) returned 0x0 [0179.199] GdipIsMatrixIdentity (matrix=0x1afff050, result=0x126818) returned 0x0 [0179.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.199] GdipGetMatrixElements (matrix=0x1afff050, matrixOut=0x1cc56130) returned 0x0 [0179.199] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.199] GdipDeleteMatrix (matrix=0x1afff050) returned 0x0 [0179.199] GdipCreateRegion (region=0x1267b0) returned 0x0 [0179.199] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.199] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x126810) returned 0x0 [0179.199] GdipSaveGraphics (graphics=0x1bae4090, state=0x1268b0) returned 0x0 [0179.199] GdipRestoreGraphics (graphics=0x1bae4090, state=0xfffffffffdb00dbd) returned 0x0 [0179.199] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.201] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x126618, fWinIni=0x0 | out: pvParam=0x126618) returned 1 [0179.201] GdipGetDC (graphics=0x1bae4090, hdc=0x126528) returned 0x0 [0179.201] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.201] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.201] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.202] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.202] SaveDC (hdc=0x2d010688) returned 1 [0179.202] GetNearestColor (hdc=0x2d010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.202] GetNearestColor (hdc=0x2d010688, color=0xa0a0a0) returned 0xa0a0a0 [0179.202] GetNearestColor (hdc=0x2d010688, color=0x696969) returned 0x696969 [0179.202] GetNearestColor (hdc=0x2d010688, color=0xa0a0a0) returned 0xa0a0a0 [0179.202] GetNearestColor (hdc=0x2d010688, color=0x0) returned 0x0 [0179.202] GetNearestColor (hdc=0x2d010688, color=0xffffff) returned 0xffffff [0179.202] GetNearestColor (hdc=0x2d010688, color=0xe5e5e5) returned 0xe5e5e5 [0179.202] GetNearestColor (hdc=0x2d010688, color=0xd8d8d8) returned 0xd8d8d8 [0179.202] GetNearestColor (hdc=0x2d010688, color=0x0) returned 0x0 [0179.202] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.202] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.205] IsAppThemed () returned 0x1 [0179.205] GetThemeAppProperties () returned 0x3 [0179.205] GetThemeAppProperties () returned 0x3 [0179.205] OpenThemeData () returned 0x30002 [0179.206] GdipGetImageWidth (image=0x1aff7c60, width=0x1265d8) returned 0x0 [0179.206] GdipGetImageHeight (image=0x1aff7c60, height=0x1265d8) returned 0x0 [0179.215] IsAppThemed () returned 0x1 [0179.215] GetThemeAppProperties () returned 0x3 [0179.215] GetThemeAppProperties () returned 0x3 [0179.215] DrawTextExW (in: hdc=0xffffffff81010666, lpchText="&Details", cchText=8, lprc=0x126198, format=0x102415, lpdtp=0x27a75e8 | out: lpchText="&Details", lprc=0x126198) returned 13 [0179.216] IsAppThemed () returned 0x1 [0179.216] GetThemeAppProperties () returned 0x3 [0179.216] GetThemeAppProperties () returned 0x3 [0179.217] IsAppThemed () returned 0x1 [0179.217] GetThemeAppProperties () returned 0x3 [0179.217] GetThemeAppProperties () returned 0x3 [0179.217] GetFocus () returned 0x4028c [0179.219] IsAppThemed () returned 0x1 [0179.219] GetThemeAppProperties () returned 0x3 [0179.219] GetThemeAppProperties () returned 0x3 [0179.219] IsAppThemed () returned 0x1 [0179.219] GetThemeAppProperties () returned 0x3 [0179.219] GetThemeAppProperties () returned 0x3 [0179.220] IsThemePartDefined () returned 0x1 [0179.220] IsAppThemed () returned 0x1 [0179.220] GetThemeAppProperties () returned 0x3 [0179.220] GetThemeAppProperties () returned 0x3 [0179.220] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0179.232] IsAppThemed () returned 0x1 [0179.232] GetThemeAppProperties () returned 0x3 [0179.232] GetThemeAppProperties () returned 0x3 [0179.233] IsAppThemed () returned 0x1 [0179.233] GetThemeAppProperties () returned 0x3 [0179.233] GetThemeAppProperties () returned 0x3 [0179.233] IsThemePartDefined () returned 0x1 [0179.233] GdipCreateRegion (region=0x126290) returned 0x0 [0179.233] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.233] GdipCreateMatrix (matrix=0x126290) returned 0x0 [0179.233] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1af5d7d0) returned 0x0 [0179.233] GdipIsMatrixIdentity (matrix=0x1af5d7d0, result=0x1262f8) returned 0x0 [0179.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.233] GdipGetMatrixElements (matrix=0x1af5d7d0, matrixOut=0x1cc56130) returned 0x0 [0179.234] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.234] GdipGetMatrixElements (matrix=0x1af5d7d0, matrixOut=0x1cc56130) returned 0x0 [0179.234] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.234] GdipDeleteMatrix (matrix=0x1af5d7d0) returned 0x0 [0179.234] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x126360) returned 0x0 [0179.234] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x126320) returned 0x0 [0179.234] GdipGetRegionHRgn (region=0x1aff85f0, graphics=0x1bae4090, hRgn=0x126320) returned 0x0 [0179.234] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.234] GdipGetDC (graphics=0x1bae4090, hdc=0x126368) returned 0x0 [0179.235] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.235] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.235] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.235] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.235] SaveDC (hdc=0x2d010688) returned 1 [0179.235] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520409db [0179.235] GetClipRgn (hdc=0x2d010688, hrgn=0x520409db) returned 0 [0179.235] SelectClipRgn (hdc=0x2d010688, hrgn=0xffffffff940407ab) returned 2 [0179.235] DeleteObject (ho=0x520409db) returned 1 [0179.235] DeleteObject (ho=0xffffffff940407ab) returned 1 [0179.235] OffsetViewportOrgEx (in: hdc=0x2d010688, x=0, y=0, lppt=0x27a8018 | out: lppt=0x27a8018) returned 1 [0179.235] DrawThemeParentBackground () returned 0x0 [0179.236] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x125f18 | out: lpwndpl=0x125f18) returned 1 [0179.236] GetClientRect (in: hWnd=0x2010a, lpRect=0x125e30 | out: lpRect=0x125e30) returned 1 [0179.236] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.236] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.236] GetSystemMetrics (nIndex=42) returned 0 [0179.236] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125b70, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.236] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125b70) returned 0x18 [0179.236] GetClientRect (in: hWnd=0x2010a, lpRect=0x125c18 | out: lpRect=0x125c18) returned 1 [0179.236] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.236] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.236] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.236] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.236] SaveDC (hdc=0x2d010688) returned 2 [0179.236] GetNearestColor (hdc=0x2d010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.236] CreateSolidBrush (color=0xf0f0f0) returned 0x181009ab [0179.237] FillRect (hDC=0x2d010688, lprc=0x125908, hbr=0x181009ab) returned 1 [0179.237] DeleteObject (ho=0x181009ab) returned 1 [0179.237] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.237] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.237] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.251] GetSystemMetrics (nIndex=42) returned 0 [0179.251] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125aa0, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.252] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125aa0) returned 0x18 [0179.252] GetClientRect (in: hWnd=0x2010a, lpRect=0x125b48 | out: lpRect=0x125b48) returned 1 [0179.252] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.252] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.252] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.252] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.252] SaveDC (hdc=0x2d010688) returned 2 [0179.252] GetNearestColor (hdc=0x2d010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.252] CreateSolidBrush (color=0xf0f0f0) returned 0x191009ab [0179.253] FillRect (hDC=0x2d010688, lprc=0x125838, hbr=0x191009ab) returned 1 [0179.253] DeleteObject (ho=0x191009ab) returned 1 [0179.253] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.253] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.253] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.253] GetSystemMetrics (nIndex=42) returned 0 [0179.253] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125aa0, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.253] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125aa0) returned 0x18 [0179.254] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.254] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.254] IsAppThemed () returned 0x1 [0179.254] GetThemeAppProperties () returned 0x3 [0179.254] GetThemeAppProperties () returned 0x3 [0179.254] IsAppThemed () returned 0x1 [0179.254] GetThemeAppProperties () returned 0x3 [0179.254] GetThemeAppProperties () returned 0x3 [0179.254] IsThemePartDefined () returned 0x1 [0179.254] GdipCreateRegion (region=0x126230) returned 0x0 [0179.254] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.254] GdipCreateMatrix (matrix=0x126230) returned 0x0 [0179.254] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1afff050) returned 0x0 [0179.254] GdipIsMatrixIdentity (matrix=0x1afff050, result=0x126298) returned 0x0 [0179.254] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.254] GdipGetMatrixElements (matrix=0x1afff050, matrixOut=0x1cc56130) returned 0x0 [0179.255] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.255] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.255] GdipGetMatrixElements (matrix=0x1afff050, matrixOut=0x1cc56130) returned 0x0 [0179.255] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.255] GdipDeleteMatrix (matrix=0x1afff050) returned 0x0 [0179.255] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x126300) returned 0x0 [0179.255] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x1262c0) returned 0x0 [0179.255] GdipGetRegionHRgn (region=0x1aff85f0, graphics=0x1bae4090, hRgn=0x1262c0) returned 0x0 [0179.255] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.255] GdipGetDC (graphics=0x1bae4090, hdc=0x126308) returned 0x0 [0179.255] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.255] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.256] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.256] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.256] SaveDC (hdc=0x2d010688) returned 1 [0179.256] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff950407ab [0179.256] GetClipRgn (hdc=0x2d010688, hrgn=0xffffffff950407ab) returned 0 [0179.256] SelectClipRgn (hdc=0x2d010688, hrgn=0x540409db) returned 2 [0179.256] DeleteObject (ho=0xffffffff950407ab) returned 1 [0179.256] DeleteObject (ho=0x540409db) returned 1 [0179.256] OffsetViewportOrgEx (in: hdc=0x2d010688, x=0, y=0, lppt=0x27a8fb8 | out: lppt=0x27a8fb8) returned 1 [0179.256] IsAppThemed () returned 0x1 [0179.256] GetThemeAppProperties () returned 0x3 [0179.256] GetThemeAppProperties () returned 0x3 [0179.257] DrawThemeBackground () returned 0x0 [0179.257] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.257] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.257] GdipCreateRegion (region=0x126220) returned 0x0 [0179.257] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.257] GdipCreateMatrix (matrix=0x126220) returned 0x0 [0179.258] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1af5d7d0) returned 0x0 [0179.258] GdipIsMatrixIdentity (matrix=0x1af5d7d0, result=0x126288) returned 0x0 [0179.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.258] GdipGetMatrixElements (matrix=0x1af5d7d0, matrixOut=0x1cc56130) returned 0x0 [0179.258] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.258] GdipGetMatrixElements (matrix=0x1af5d7d0, matrixOut=0x1cc56130) returned 0x0 [0179.258] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.258] GdipDeleteMatrix (matrix=0x1af5d7d0) returned 0x0 [0179.258] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x1262f0) returned 0x0 [0179.258] GdipIsInfiniteRegion (region=0x1aff85f0, graphics=0x1bae4090, result=0x1262b0) returned 0x0 [0179.258] GdipGetRegionHRgn (region=0x1aff85f0, graphics=0x1bae4090, hRgn=0x1262b0) returned 0x0 [0179.259] GdipDeleteRegion (region=0x1aff85f0) returned 0x0 [0179.259] GdipGetDC (graphics=0x1bae4090, hdc=0x1262f8) returned 0x0 [0179.259] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.259] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.259] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.259] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.259] SaveDC (hdc=0x2d010688) returned 1 [0179.259] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x550409db [0179.259] GetClipRgn (hdc=0x2d010688, hrgn=0x550409db) returned 0 [0179.259] SelectClipRgn (hdc=0x2d010688, hrgn=0xffffffff960407ab) returned 2 [0179.259] DeleteObject (ho=0x550409db) returned 1 [0179.260] DeleteObject (ho=0xffffffff960407ab) returned 1 [0179.260] OffsetViewportOrgEx (in: hdc=0x2d010688, x=0, y=0, lppt=0x27a9490 | out: lppt=0x27a9490) returned 1 [0179.260] IsAppThemed () returned 0x1 [0179.260] GetThemeAppProperties () returned 0x3 [0179.260] GetThemeAppProperties () returned 0x3 [0179.260] GetThemeBackgroundContentRect () returned 0x0 [0179.260] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.260] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.284] GdipCreateRegion (region=0x126580) returned 0x0 [0179.284] GdipGetClip (graphics=0x1bae4090, region=0x1aff85f0) returned 0x0 [0179.286] GdipCloneRegion (region=0x1aff85f0, cloneRegion=0x1265e8) returned 0x0 [0179.289] GdipCombineRegionRectI (region=0x1af5bd80, rect=0x1265e0, combineMode=0x1) returned 0x0 [0179.289] GdipCombineRegionRectI (region=0x1af5bd80, rect=0x1265e0, combineMode=0x1) returned 0x0 [0179.290] GdipSetClipRegion (graphics=0x1bae4090, region=0x1af5bd80, combineMode=0x0) returned 0x0 [0179.290] GdipGetImageWidth (image=0x1aff7c60, width=0x1265e8) returned 0x0 [0179.290] GdipGetImageHeight (image=0x1aff7c60, height=0x1265e8) returned 0x0 [0179.290] GdipDrawImageRectI (graphics=0x1bae4090, image=0x1aff7c60, x=4, y=4, width=16, height=16) returned 0x0 [0179.291] GdipSetClipRegion (graphics=0x1bae4090, region=0x1aff85f0, combineMode=0x0) returned 0x0 [0179.291] IsAppThemed () returned 0x1 [0179.291] GetThemeAppProperties () returned 0x3 [0179.291] GetThemeAppProperties () returned 0x3 [0179.291] GdipGetTextRenderingHint (graphics=0x1bae4090, mode=0x1264d8) returned 0x0 [0179.291] GdipGetDC (graphics=0x1bae4090, hdc=0x1264b8) returned 0x0 [0179.291] GetCurrentObject (hdc=0x2d010688, type=0x1) returned 0x1b00017 [0179.291] GetCurrentObject (hdc=0x2d010688, type=0x2) returned 0x1900010 [0179.291] GetCurrentObject (hdc=0x2d010688, type=0x7) returned 0x30050213 [0179.291] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.291] SaveDC (hdc=0x2d010688) returned 1 [0179.291] GetTextAlign (hdc=0x2d010688) returned 0x0 [0179.291] GetTextColor (hdc=0x2d010688) returned 0x0 [0179.292] GetCurrentObject (hdc=0x2d010688, type=0x6) returned 0x18a002e [0179.292] GetObjectW (in: h=0x18a002e, c=92, pv=0x125ff0 | out: pv=0x125ff0) returned 92 [0179.292] SelectObject (hdc=0x2d010688, h=0x250a0684) returned 0x18a002e [0179.292] GetBkMode (hdc=0x2d010688) returned 2 [0179.292] SetBkMode (hdc=0x2d010688, mode=1) returned 2 [0179.292] DrawTextExW (in: hdc=0x2d010688, lpchText="&Details", cchText=8, lprc=0x126230, format=0x102415, lpdtp=0x27a9ab0 | out: lpchText="&Details", lprc=0x126230) returned 13 [0179.292] DrawTextExW (in: hdc=0x2d010688, lpchText="&Details", cchText=8, lprc=0x126448, format=0x102015, lpdtp=0x27a9ab0 | out: lpchText="&Details", lprc=0x126448) returned 13 [0179.293] RestoreDC (hdc=0x2d010688, nSavedDC=-1) returned 1 [0179.293] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.293] GetFocus () returned 0x4028c [0179.293] IsAppThemed () returned 0x1 [0179.293] GetThemeAppProperties () returned 0x3 [0179.293] GetThemeAppProperties () returned 0x3 [0179.293] GdipGetDC (graphics=0x1bae4090, hdc=0x1267c8) returned 0x0 [0179.293] BitBlt (hdc=0x20109b2, x=0, y=0, cx=100, cy=23, hdcSrc=0x2d010688, x1=0, y1=0, rop=0xcc0020) returned 1 [0179.293] GdipReleaseDC (graphics=0x1bae4090, hdc=0x2d010688) returned 0x0 [0179.293] SelectPalette (hdc=0x20109b2, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0179.293] SelectObject (hdc=0x2d010688, h=0x185000f) returned 0x30050213 [0179.293] DeleteDC (hdc=0x2d010688) returned 1 [0179.293] GdipDeleteGraphics (graphics=0x1bae4090) returned 0x0 [0179.293] EndPaint (hWnd=0x4028c, lpPaint=0x1267a8) returned 1 [0179.293] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.295] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0179.296] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0179.296] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0179.296] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0179.302] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x126f80) returned 0x0 [0179.302] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.302] IsWindowUnicode (hWnd=0x20294) returned 1 [0179.302] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.302] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.302] GetDlgItem (hDlg=0x2010a, nIDDlgItem=0) returned 0x0 [0179.302] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x210, wParam=0x201, lParam=0x690117) returned 0x0 [0179.302] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x21, wParam=0x2010a, lParam=0x2010001) returned 0x1 [0179.302] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x21, wParam=0x2010a, lParam=0x2010001) returned 0x1 [0179.303] SetCursor (hCursor=0x10003) returned 0x10003 [0179.303] TranslateMessage (lpMsg=0x127140) returned 0 [0179.303] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.303] GetKeyState (nVirtKey=1) returned -127 [0179.303] GetKeyState (nVirtKey=2) returned 0 [0179.303] GetKeyState (nVirtKey=4) returned 0 [0179.303] GetKeyState (nVirtKey=5) returned 0 [0179.303] GetKeyState (nVirtKey=6) returned 0 [0179.303] IsWindowVisible (hWnd=0x20294) returned 1 [0179.303] IsWindowEnabled (hWnd=0x20294) returned 1 [0179.303] SetFocus (hWnd=0x20294) returned 0x4028c [0179.303] GetFocus () returned 0x20294 [0179.303] IsChild (hWndParent=0x2010a, hWnd=0x20294) returned 1 [0179.303] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x8, wParam=0x20294, lParam=0x0) returned 0x0 [0179.303] GetCapture () returned 0x0 [0179.303] InvalidateRect (hWnd=0x4028c, lpRect=0x0, bErase=0) returned 1 [0179.303] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0179.304] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0179.304] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0179.307] InvalidateRect (hWnd=0x4028c, lpRect=0x0, bErase=0) returned 1 [0179.307] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0179.307] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x7, wParam=0x4028c, lParam=0x0) returned 0x0 [0179.307] GetStockObject (i=5) returned 0x1900015 [0179.307] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0179.308] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0xd, wParam=0xa, lParam=0x1cc78d60) returned 0x9 [0179.308] GetDlgItem (hDlg=0x2010a, nIDDlgItem=131732) returned 0x20294 [0179.308] SendMessageW (hWnd=0x20294, Msg=0x202b, wParam=0x20294, lParam=0x126000) returned 0x0 [0179.308] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x202b, wParam=0x20294, lParam=0x126000) returned 0x0 [0179.308] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0179.308] GetFocus () returned 0x20294 [0179.308] GetFocus () returned 0x20294 [0179.308] GetFocus () returned 0x20294 [0179.308] GetKeyState (nVirtKey=1) returned -127 [0179.308] GetKeyState (nVirtKey=2) returned 0 [0179.308] GetKeyState (nVirtKey=4) returned 0 [0179.309] GetKeyState (nVirtKey=5) returned 0 [0179.309] GetKeyState (nVirtKey=6) returned 0 [0179.309] GetCapture () returned 0x0 [0179.309] SetCapture (hWnd=0x20294) returned 0x0 [0179.309] GetKeyState (nVirtKey=1) returned -127 [0179.309] GetKeyState (nVirtKey=2) returned 0 [0179.309] GetKeyState (nVirtKey=4) returned 0 [0179.309] GetKeyState (nVirtKey=5) returned 0 [0179.309] GetKeyState (nVirtKey=6) returned 0 [0179.309] NotifyWinEvent (event=0x800a, hwnd=0x20294, idObject=-4, idChild=0) [0179.310] InvalidateRect (hWnd=0x20294, lpRect=0x126a80, bErase=0) returned 1 [0179.310] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.310] GetMessageA (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.310] TranslateMessage (lpMsg=0x127140) returned 0 [0179.310] DispatchMessageA (lpMsg=0x127140) returned 0x0 [0179.310] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.310] IsWindowUnicode (hWnd=0x20294) returned 1 [0179.310] GetMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x127140) returned 1 [0179.310] TranslateMessage (lpMsg=0x127140) returned 0 [0179.310] DispatchMessageW (lpMsg=0x127140) returned 0x0 [0179.310] MapWindowPoints (in: hWndFrom=0x20294, hWndTo=0x0, lpPoints=0x27a9da0, cPoints=0x1 | out: lpPoints=0x27a9da0) returned 30933718 [0179.310] NotifyWinEvent (event=0x800a, hwnd=0x20294, idObject=-4, idChild=0) [0179.310] InvalidateRect (hWnd=0x20294, lpRect=0x126a10, bErase=0) returned 1 [0179.311] UpdateWindow (hWnd=0x20294) returned 1 [0179.311] BeginPaint (in: hWnd=0x20294, lpPaint=0x126188 | out: lpPaint=0x126188) returned 0x370101ca [0179.311] SelectPalette (hdc=0x370101ca, hPal=0x4c080786, bForceBkgd=1) returned 0x188000b [0179.311] CreateCompatibleDC (hdc=0x370101ca) returned 0x34010688 [0179.311] SelectObject (hdc=0x34010688, h=0x30050213) returned 0x185000f [0179.311] GdipCreateFromHDC (hdc=0x34010688, graphics=0x126108) returned 0x0 [0179.311] GdipTranslateWorldTransform (graphics=0x1bae4090, dx=0x7fef12fdf12, dy=0xda1eac199dbf, order=0x0) returned 0x0 [0179.311] GdipSetClipRectI (graphics=0x1bae4090, x=0, y=0, width=100, height=23, combineMode=0x0) returned 0x0 [0179.311] GdipCreateMatrix (matrix=0x126130) returned 0x0 [0179.311] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1baea3f0) returned 0x0 [0179.311] GdipIsMatrixIdentity (matrix=0x1baea3f0, result=0x126198) returned 0x0 [0179.311] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.312] GdipGetMatrixElements (matrix=0x1baea3f0, matrixOut=0x1cc56130) returned 0x0 [0179.312] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.312] GdipDeleteMatrix (matrix=0x1baea3f0) returned 0x0 [0179.312] GdipCreateRegion (region=0x126130) returned 0x0 [0179.312] GdipGetClip (graphics=0x1bae4090, region=0x1bae45f0) returned 0x0 [0179.312] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x126190) returned 0x0 [0179.312] GdipSaveGraphics (graphics=0x1bae4090, state=0x126230) returned 0x0 [0179.312] GdipRestoreGraphics (graphics=0x1bae4090, state=0xfffffffffdae0dbd) returned 0x0 [0179.313] GdipDeleteRegion (region=0x1bae45f0) returned 0x0 [0179.315] GdipGetDC (graphics=0x1bae4090, hdc=0x125ea8) returned 0x0 [0179.315] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.315] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.315] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.315] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.315] SaveDC (hdc=0x34010688) returned 1 [0179.315] GetNearestColor (hdc=0x34010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.315] GetNearestColor (hdc=0x34010688, color=0xa0a0a0) returned 0xa0a0a0 [0179.315] GetNearestColor (hdc=0x34010688, color=0x696969) returned 0x696969 [0179.315] GetNearestColor (hdc=0x34010688, color=0xa0a0a0) returned 0xa0a0a0 [0179.315] GetNearestColor (hdc=0x34010688, color=0x0) returned 0x0 [0179.316] GetNearestColor (hdc=0x34010688, color=0xffffff) returned 0xffffff [0179.316] GetNearestColor (hdc=0x34010688, color=0xe5e5e5) returned 0xe5e5e5 [0179.316] GetNearestColor (hdc=0x34010688, color=0xd8d8d8) returned 0xd8d8d8 [0179.316] GetNearestColor (hdc=0x34010688, color=0x0) returned 0x0 [0179.316] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.316] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.316] IsAppThemed () returned 0x1 [0179.316] GetThemeAppProperties () returned 0x3 [0179.316] GetThemeAppProperties () returned 0x3 [0179.316] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x125f48, fWinIni=0x0 | out: pvParam=0x125f48) returned 1 [0179.316] SendMessageW (hWnd=0x2010a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0179.316] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0179.316] IsAppThemed () returned 0x1 [0179.316] GetThemeAppProperties () returned 0x3 [0179.316] GetThemeAppProperties () returned 0x3 [0179.316] DrawTextExW (in: hdc=0xffffffff81010666, lpchText="&Continue", cchText=9, lprc=0x125b18, format=0x102415, lpdtp=0x27aa960 | out: lpchText="&Continue", lprc=0x125b18) returned 13 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsThemePartDefined () returned 0x1 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsAppThemed () returned 0x1 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] GetThemeAppProperties () returned 0x3 [0179.317] IsThemePartDefined () returned 0x1 [0179.317] GdipCreateRegion (region=0x125c10) returned 0x0 [0179.317] GdipGetClip (graphics=0x1bae4090, region=0x1bae45f0) returned 0x0 [0179.317] GdipCreateMatrix (matrix=0x125c10) returned 0x0 [0179.318] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1baea430) returned 0x0 [0179.318] GdipIsMatrixIdentity (matrix=0x1baea430, result=0x125c78) returned 0x0 [0179.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.318] GdipGetMatrixElements (matrix=0x1baea430, matrixOut=0x1cc56130) returned 0x0 [0179.318] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.318] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.318] GdipGetMatrixElements (matrix=0x1baea430, matrixOut=0x1cc56130) returned 0x0 [0179.318] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.318] GdipDeleteMatrix (matrix=0x1baea430) returned 0x0 [0179.318] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125ce0) returned 0x0 [0179.318] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125ca0) returned 0x0 [0179.319] GdipGetRegionHRgn (region=0x1bae45f0, graphics=0x1bae4090, hRgn=0x125ca0) returned 0x0 [0179.319] GdipDeleteRegion (region=0x1bae45f0) returned 0x0 [0179.319] GdipGetDC (graphics=0x1bae4090, hdc=0x125ce8) returned 0x0 [0179.319] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.319] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.319] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.319] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.319] SaveDC (hdc=0x34010688) returned 1 [0179.319] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff970407ab [0179.319] GetClipRgn (hdc=0x34010688, hrgn=0xffffffff970407ab) returned 0 [0179.319] SelectClipRgn (hdc=0x34010688, hrgn=0x5b0409db) returned 2 [0179.319] DeleteObject (ho=0xffffffff970407ab) returned 1 [0179.319] DeleteObject (ho=0x5b0409db) returned 1 [0179.319] OffsetViewportOrgEx (in: hdc=0x34010688, x=0, y=0, lppt=0x27ab348 | out: lppt=0x27ab348) returned 1 [0179.319] DrawThemeParentBackground () returned 0x0 [0179.320] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x125898 | out: lpwndpl=0x125898) returned 1 [0179.320] GetClientRect (in: hWnd=0x2010a, lpRect=0x1257b0 | out: lpRect=0x1257b0) returned 1 [0179.320] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.320] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.320] GetSystemMetrics (nIndex=42) returned 0 [0179.320] GetWindowTextW (in: hWnd=0x2010a, lpString=0x1254f0, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.320] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x1254f0) returned 0x18 [0179.320] GetClientRect (in: hWnd=0x2010a, lpRect=0x125598 | out: lpRect=0x125598) returned 1 [0179.320] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.320] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.320] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.320] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.320] SaveDC (hdc=0x34010688) returned 2 [0179.320] GetNearestColor (hdc=0x34010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.320] CreateSolidBrush (color=0xf0f0f0) returned 0x1a1009ab [0179.320] FillRect (hDC=0x34010688, lprc=0x125288, hbr=0x1a1009ab) returned 1 [0179.320] DeleteObject (ho=0x1a1009ab) returned 1 [0179.321] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.321] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.321] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.321] GetSystemMetrics (nIndex=42) returned 0 [0179.321] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125420, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.321] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125420) returned 0x18 [0179.321] GetClientRect (in: hWnd=0x2010a, lpRect=0x1254c8 | out: lpRect=0x1254c8) returned 1 [0179.321] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.322] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.322] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.322] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.322] SaveDC (hdc=0x34010688) returned 2 [0179.322] GetNearestColor (hdc=0x34010688, color=0xf0f0f0) returned 0xf0f0f0 [0179.322] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1009ab [0179.322] FillRect (hDC=0x34010688, lprc=0x1251b8, hbr=0x1b1009ab) returned 1 [0179.322] DeleteObject (ho=0x1b1009ab) returned 1 [0179.323] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.323] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.323] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.323] GetSystemMetrics (nIndex=42) returned 0 [0179.323] GetWindowTextW (in: hWnd=0x2010a, lpString=0x125420, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.323] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x125420) returned 0x18 [0179.323] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.323] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.323] IsAppThemed () returned 0x1 [0179.323] GetThemeAppProperties () returned 0x3 [0179.323] GetThemeAppProperties () returned 0x3 [0179.323] IsAppThemed () returned 0x1 [0179.323] GetThemeAppProperties () returned 0x3 [0179.323] GetThemeAppProperties () returned 0x3 [0179.323] IsThemePartDefined () returned 0x1 [0179.323] GdipCreateRegion (region=0x125bb0) returned 0x0 [0179.323] GdipGetClip (graphics=0x1bae4090, region=0x1bae45f0) returned 0x0 [0179.323] GdipCreateMatrix (matrix=0x125bb0) returned 0x0 [0179.324] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1baea3f0) returned 0x0 [0179.324] GdipIsMatrixIdentity (matrix=0x1baea3f0, result=0x125c18) returned 0x0 [0179.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.324] GdipGetMatrixElements (matrix=0x1baea3f0, matrixOut=0x1cc56130) returned 0x0 [0179.324] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.324] GdipGetMatrixElements (matrix=0x1baea3f0, matrixOut=0x1cc56130) returned 0x0 [0179.324] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.324] GdipDeleteMatrix (matrix=0x1baea3f0) returned 0x0 [0179.324] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125c80) returned 0x0 [0179.325] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125c40) returned 0x0 [0179.325] GdipGetRegionHRgn (region=0x1bae45f0, graphics=0x1bae4090, hRgn=0x125c40) returned 0x0 [0179.325] GdipDeleteRegion (region=0x1bae45f0) returned 0x0 [0179.325] GdipGetDC (graphics=0x1bae4090, hdc=0x125c88) returned 0x0 [0179.325] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.325] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.325] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.325] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.325] SaveDC (hdc=0x34010688) returned 1 [0179.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0409db [0179.325] GetClipRgn (hdc=0x34010688, hrgn=0x5c0409db) returned 0 [0179.325] SelectClipRgn (hdc=0x34010688, hrgn=0xffffffff990407ab) returned 2 [0179.325] DeleteObject (ho=0x5c0409db) returned 1 [0179.325] DeleteObject (ho=0xffffffff990407ab) returned 1 [0179.326] OffsetViewportOrgEx (in: hdc=0x34010688, x=0, y=0, lppt=0x27ac2e8 | out: lppt=0x27ac2e8) returned 1 [0179.326] IsAppThemed () returned 0x1 [0179.326] GetThemeAppProperties () returned 0x3 [0179.326] GetThemeAppProperties () returned 0x3 [0179.326] DrawThemeBackground () returned 0x0 [0179.326] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.326] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.326] GdipCreateRegion (region=0x125ba0) returned 0x0 [0179.326] GdipGetClip (graphics=0x1bae4090, region=0x1bae45f0) returned 0x0 [0179.326] GdipCreateMatrix (matrix=0x125ba0) returned 0x0 [0179.326] GdipGetWorldTransform (graphics=0x1bae4090, matrix=0x1baea430) returned 0x0 [0179.326] GdipIsMatrixIdentity (matrix=0x1baea430, result=0x125c08) returned 0x0 [0179.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.326] GdipGetMatrixElements (matrix=0x1baea430, matrixOut=0x1cc56130) returned 0x0 [0179.326] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1cc56130 [0179.326] GdipGetMatrixElements (matrix=0x1baea430, matrixOut=0x1cc56130) returned 0x0 [0179.327] LocalFree (hMem=0x1cc56130) returned 0x0 [0179.327] GdipDeleteMatrix (matrix=0x1baea430) returned 0x0 [0179.327] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125c70) returned 0x0 [0179.327] GdipIsInfiniteRegion (region=0x1bae45f0, graphics=0x1bae4090, result=0x125c30) returned 0x0 [0179.327] GdipGetRegionHRgn (region=0x1bae45f0, graphics=0x1bae4090, hRgn=0x125c30) returned 0x0 [0179.327] GdipDeleteRegion (region=0x1bae45f0) returned 0x0 [0179.327] GdipGetDC (graphics=0x1bae4090, hdc=0x125c78) returned 0x0 [0179.327] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.327] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.327] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.327] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.327] SaveDC (hdc=0x34010688) returned 1 [0179.327] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9a0407ab [0179.327] GetClipRgn (hdc=0x34010688, hrgn=0xffffffff9a0407ab) returned 0 [0179.327] SelectClipRgn (hdc=0x34010688, hrgn=0x5d0409db) returned 2 [0179.327] DeleteObject (ho=0xffffffff9a0407ab) returned 1 [0179.327] DeleteObject (ho=0x5d0409db) returned 1 [0179.327] OffsetViewportOrgEx (in: hdc=0x34010688, x=0, y=0, lppt=0x27ac7c0 | out: lppt=0x27ac7c0) returned 1 [0179.328] IsAppThemed () returned 0x1 [0179.328] GetThemeAppProperties () returned 0x3 [0179.328] GetThemeAppProperties () returned 0x3 [0179.328] GetThemeBackgroundContentRect () returned 0x0 [0179.328] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.328] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.328] IsAppThemed () returned 0x1 [0179.328] GetThemeAppProperties () returned 0x3 [0179.328] GetThemeAppProperties () returned 0x3 [0179.328] GdipGetTextRenderingHint (graphics=0x1bae4090, mode=0x125e58) returned 0x0 [0179.328] GdipGetDC (graphics=0x1bae4090, hdc=0x125e38) returned 0x0 [0179.328] GetCurrentObject (hdc=0x34010688, type=0x1) returned 0x1b00017 [0179.328] GetCurrentObject (hdc=0x34010688, type=0x2) returned 0x1900010 [0179.328] GetCurrentObject (hdc=0x34010688, type=0x7) returned 0x30050213 [0179.328] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.328] SaveDC (hdc=0x34010688) returned 1 [0179.328] GetTextAlign (hdc=0x34010688) returned 0x0 [0179.328] GetTextColor (hdc=0x34010688) returned 0x0 [0179.328] GetCurrentObject (hdc=0x34010688, type=0x6) returned 0x18a002e [0179.328] GetObjectW (in: h=0x18a002e, c=92, pv=0x125970 | out: pv=0x125970) returned 92 [0179.329] SelectObject (hdc=0x34010688, h=0x250a0684) returned 0x18a002e [0179.329] GetBkMode (hdc=0x34010688) returned 2 [0179.329] SetBkMode (hdc=0x34010688, mode=1) returned 2 [0179.329] DrawTextExW (in: hdc=0x34010688, lpchText="&Continue", cchText=9, lprc=0x125bb0, format=0x102415, lpdtp=0x27acda0 | out: lpchText="&Continue", lprc=0x125bb0) returned 13 [0179.329] DrawTextExW (in: hdc=0x34010688, lpchText="&Continue", cchText=9, lprc=0x125dc8, format=0x102015, lpdtp=0x27acda0 | out: lpchText="&Continue", lprc=0x125dc8) returned 13 [0179.329] RestoreDC (hdc=0x34010688, nSavedDC=-1) returned 1 [0179.329] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.329] GetFocus () returned 0x20294 [0179.329] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x125fa8, fWinIni=0x0 | out: pvParam=0x125fa8) returned 1 [0179.329] SendMessageW (hWnd=0x2010a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0179.329] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0179.329] IsAppThemed () returned 0x1 [0179.329] GetThemeAppProperties () returned 0x3 [0179.330] GetThemeAppProperties () returned 0x3 [0179.330] GdipGetDC (graphics=0x1bae4090, hdc=0x126148) returned 0x0 [0179.330] BitBlt (hdc=0x370101ca, x=0, y=0, cx=100, cy=23, hdcSrc=0x34010688, x1=0, y1=0, rop=0xcc0020) returned 1 [0179.330] GdipReleaseDC (graphics=0x1bae4090, hdc=0x34010688) returned 0x0 [0179.330] SelectPalette (hdc=0x370101ca, hPal=0x188000b, bForceBkgd=0) returned 0x4c080786 [0179.330] SelectObject (hdc=0x34010688, h=0x185000f) returned 0x30050213 [0179.330] DeleteDC (hdc=0x34010688) returned 1 [0179.330] GdipDeleteGraphics (graphics=0x1bae4090) returned 0x0 [0179.330] EndPaint (hWnd=0x20294, lpPaint=0x126128) returned 1 [0179.330] MapWindowPoints (in: hWndFrom=0x20294, hWndTo=0x0, lpPoints=0x27acf08, cPoints=0x1 | out: lpPoints=0x27acf08) returned 30933718 [0179.331] WindowFromPoint (Point=0x1e30000030c) returned 0x20294 [0179.331] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.335] NotifyWinEvent (event=0x800a, hwnd=0x20294, idObject=-4, idChild=0) [0179.335] NotifyWinEvent (event=0x800c, hwnd=0x20294, idObject=-4, idChild=0) [0179.335] GetCapture () returned 0x20294 [0179.335] ReleaseCapture () returned 1 [0179.335] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0179.335] PeekMessageW (in: lpMsg=0x127140, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x127140) returned 1 [0179.335] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x84, wParam=0x0, lParam=0x1e3030c) returned 0x1 [0179.384] IsWindow (hWnd=0x2026c) returned 1 [0179.384] EnableWindow (hWnd=0x2026c, bEnable=1) returned 1 [0179.384] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0179.384] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-8) returned 0x0 [0179.384] IsWindow (hWnd=0x0) returned 0 [0179.384] IsWindow (hWnd=0x0) returned 0 [0179.384] IsWindow (hWnd=0x0) returned 0 [0179.384] GetFocus () returned 0x20294 [0179.384] IsChild (hWndParent=0x2010a, hWnd=0x20294) returned 1 [0179.384] ShowWindow (hWnd=0x2010a, nCmdShow=0) returned 1 [0179.385] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0179.385] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x46, wParam=0x0, lParam=0x127040) returned 0x0 [0179.389] GetWindowPlacement (in: hWnd=0x2010a, lpwndpl=0x126c18 | out: lpwndpl=0x126c18) returned 1 [0179.389] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x47, wParam=0x0, lParam=0x127040) returned 0x0 [0179.389] GetClientRect (in: hWnd=0x2010a, lpRect=0x126ab0 | out: lpRect=0x126ab0) returned 1 [0179.389] GetWindowRect (in: hWnd=0x2010a, lpRect=0x126ab0 | out: lpRect=0x126ab0) returned 1 [0179.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0179.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0179.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0179.390] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0179.391] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0179.391] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0179.391] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0179.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x1c, wParam=0x0, lParam=0x9d8) returned 0x0 [0179.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x1c, wParam=0x0, lParam=0x9d8) returned 0x0 [0179.392] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x1c, wParam=0x0, lParam=0x9d8) returned 0x0 [0179.392] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x1c, wParam=0x0, lParam=0x9d8) returned 0x0 [0179.392] GetFocus () returned 0x0 [0179.392] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0179.392] GetCapture () returned 0x0 [0179.392] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0179.392] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0179.392] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0179.392] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0179.393] GetWindowLongPtrW (hWnd=0x2010a, nIndex=-20) returned 0x50109 [0179.393] DestroyWindow (hWnd=0x2010a) returned 1 [0179.393] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0179.420] GetWindowTextLengthW (hWnd=0x2010a) returned 24 [0179.420] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0179.420] GetSystemMetrics (nIndex=42) returned 0 [0179.420] GetWindowTextW (in: hWnd=0x2010a, lpString=0x126840, nMaxCount=25 | out: lpString="Microsoft .NET Framework") returned 24 [0179.420] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0xd, wParam=0x19, lParam=0x126840) returned 0x18 [0179.420] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.425] GetWindowTextLengthW (hWnd=0x2004a) returned 0 [0179.425] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0179.425] GetSystemMetrics (nIndex=42) returned 0 [0179.425] GetWindowTextW (in: hWnd=0x2004a, lpString=0x1268a0, nMaxCount=1 | out: lpString="") returned 0 [0179.425] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0xd, wParam=0x1, lParam=0x1268a0) returned 0x0 [0179.426] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.426] GetWindowThreadProcessId (in: hWnd=0x2004c, lpdwProcessId=0x126938 | out: lpdwProcessId=0x126938) returned 0x408 [0179.466] GetWindow (hWnd=0x2004c, uCmd=0x5) returned 0x0 [0179.466] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-20) returned 0x10100 [0179.466] DestroyWindow (hWnd=0x2004c) returned 1 [0179.467] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0179.467] GetWindowTextLengthW (hWnd=0x2004c) returned 25 [0179.467] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0179.467] GetSystemMetrics (nIndex=42) returned 0 [0179.467] GetWindowTextW (in: hWnd=0x2004c, lpString=0x125ed0, nMaxCount=26 | out: lpString="WindowsFormsParkingWindow") returned 25 [0179.467] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0xd, wParam=0x1a, lParam=0x125ed0) returned 0x19 [0179.467] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.467] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.471] GetWindowTextLengthW (hWnd=0x20048) returned 266 [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10a [0179.471] GetSystemMetrics (nIndex=42) returned 0 [0179.471] CoTaskMemAlloc (cb=0x21a) returned 0x106c760 [0179.471] GetWindowTextW (in: hWnd=0x20048, lpString=0x106c760, nMaxCount=267 | out: lpString="Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.\r\n\r\nThe remote name could not be resolved: 'fairybreathes.6te.net'.") returned 266 [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0xd, wParam=0x10b, lParam=0x106c760) returned 0x10a [0179.471] CoTaskMemFree (pv=0x106c760) [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.471] InvalidateRect (hWnd=0x20294, lpRect=0x0, bErase=0) returned 1 [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.471] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0179.472] SendMessageW (hWnd=0x20288, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0179.472] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0179.472] SendMessageW (hWnd=0x20288, Msg=0xb0, wParam=0x276a294, lParam=0x126a10) returned 0x0 [0179.472] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xb0, wParam=0x276a294, lParam=0x126a10) returned 0x0 [0179.472] GetWindowTextLengthW (hWnd=0x20288) returned 3577 [0179.472] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xdf9 [0179.472] GetSystemMetrics (nIndex=42) returned 0 [0179.472] CoTaskMemAlloc (cb=0x1bf8) returned 0x1cc7ebb0 [0179.473] GetWindowTextW (in: hWnd=0x20288, lpString=0x1cc7ebb0, nMaxCount=3578 | out: lpString="See the end of this message for details on invoking \r\njust-in-time (JIT) debugging instead of this dialog box.\r\n\r\n************** Exception Text **************\r\nSystem.Net.WebException: The remote name could not be resolved: 'fairybreathes.6te.net'\r\n at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request)\r\n at System.Net.WebClient.DownloadString(Uri address)\r\n at hyBrDFjOidLuty.Form1.startAction()\r\n at System.Windows.Forms.Form.OnLoad(EventArgs e)\r\n at System.Windows.Forms.Form.OnCreateControl()\r\n at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)\r\n at System.Windows.Forms.Control.CreateControl()\r\n at System.Windows.Forms.Control.WmShowWindow(Message& m)\r\n at System.Windows.Forms.Control.WndProc(Message& m)\r\n at System.Windows.Forms.Form.WmShowWindow(Message& m)\r\n at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)\r\n\r\n\r\n************** Loaded Assemblies **************\r\nmscorlib\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/mscorlib.dll\r\n----------------------------------------\r\nhyBrDFjOidLuty\r\n Assembly Version: 1.0.1.0\r\n Win32 Version: 0.2.0.2\r\n CodeBase: file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/hyBrDFjOidLuty.exe\r\n----------------------------------------\r\nSystem.Windows.Forms\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll\r\n----------------------------------------\r\nSystem\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll\r\n----------------------------------------\r\nSystem.Drawing\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll\r\n----------------------------------------\r\nSystem.Core\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll\r\n----------------------------------------\r\nSystem.Configuration\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll\r\n----------------------------------------\r\nSystem.Xml\r\n Assembly Version: 4.0.0.0\r\n Win32 Version: 4.6.81.0 built by: NETFXREL2\r\n CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll\r\n----------------------------------------\r\n\r\n************** JIT Debugging **************\r\nTo enable just-in-time (JIT) debugging, the .config file for this\r\napplication or computer (machine.config) must have the\r\njitDebugging value set in the system.windows.forms section.\r\nThe application must also be compiled with debugging\r\nenabled.\r\n\r\nFor example:\r\n\r\n\r\n \r\n\r\n\r\nWhen JIT debugging is enabled, any unhandled exception\r\nwill be sent to the JIT debugger registered on the computer\r\nrather than be handled by this dialog box.\r\n\r\n\r\n") returned 3577 [0179.473] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0xd, wParam=0xdfa, lParam=0x1cc7ebb0) returned 0xdf9 [0179.474] CoTaskMemFree (pv=0x1cc7ebb0) [0179.474] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0179.474] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2004a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.475] CallWindowProcW (lpPrevWndFunc=0x7fefc5861b4, hWnd=0x20048, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.476] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x4028c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.477] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20294, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.478] CallWindowProcW (lpPrevWndFunc=0x7fefc583b20, hWnd=0x20296, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.479] CallWindowProcW (lpPrevWndFunc=0x7fefc58975c, hWnd=0x20288, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.480] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2010a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0179.484] GetWindowTextLengthW (hWnd=0x2026c) returned 5 [0179.484] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0179.484] GetSystemMetrics (nIndex=42) returned 0 [0179.484] GetWindowTextW (in: hWnd=0x2026c, lpString=0x12e5b0, nMaxCount=6 | out: lpString="Form1") returned 5 [0179.484] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0xd, wParam=0x6, lParam=0x12e5b0) returned 0x5 [0179.484] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 1 [0179.484] IsWindowUnicode (hWnd=0x30046) returned 1 [0179.484] GetMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x12e950) returned 1 [0179.484] TranslateMessage (lpMsg=0x12e950) returned 0 [0179.484] DispatchMessageW (lpMsg=0x12e950) returned 0x0 [0179.484] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0179.485] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0179.485] WaitMessage () returned 1 [0179.708] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 1 [0179.708] IsWindowUnicode (hWnd=0x3001c) returned 1 [0179.708] GetMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x12e950) returned 1 [0179.708] TranslateMessage (lpMsg=0x12e950) returned 0 [0179.708] DispatchMessageW (lpMsg=0x12e950) returned 0x0 [0179.708] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0179.708] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0179.709] WaitMessage () returned 1 [0180.245] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0180.245] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.245] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.245] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.245] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0180.245] WaitMessage () returned 1 [0180.441] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0180.441] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.441] CallWindowProcW (lpPrevWndFunc=0x77a8b0ac, hWnd=0x2026c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.442] NtdllDefWindowProc_W (hWnd=0x20298, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0180.442] PeekMessageW (in: lpMsg=0x12e950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x12e950) returned 0 [0180.442] WaitMessage () Thread: id = 11 os_tid = 0x414 Thread: id = 12 os_tid = 0x774 [0067.226] CoGetContextToken (in: pToken=0x11ff380 | out: pToken=0x11ff380) returned 0x800401f0 [0067.226] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.351] CloseHandle (hObject=0x310) returned 1 [0176.408] CloseHandle (hObject=0x4b0) returned 1 [0176.408] CloseHandle (hObject=0x460) returned 1 [0176.408] CloseHandle (hObject=0x38c) returned 1 [0176.408] CertCloseStore (hCertStore=0xfa9b00, dwFlags=0x0) returned 1 [0176.408] CloseHandle (hObject=0x388) returned 1 [0176.409] CloseHandle (hObject=0x384) returned 1 [0176.409] CloseHandle (hObject=0x380) returned 1 [0176.409] CloseHandle (hObject=0x37c) returned 1 [0176.409] CertFreeCRLContext (pCrlContext=0x1018ac0) returned 1 [0176.409] CloseHandle (hObject=0x378) returned 1 [0176.409] CloseHandle (hObject=0x374) returned 1 [0176.410] CloseHandle (hObject=0x368) returned 1 [0176.410] CloseHandle (hObject=0x364) returned 1 [0176.410] CertFreeCRLContext (pCrlContext=0x1018b40) returned 1 [0176.410] CloseHandle (hObject=0x360) returned 1 [0176.411] CloseHandle (hObject=0x35c) returned 1 [0176.411] CloseHandle (hObject=0x358) returned 1 [0176.411] CertFreeCRLContext (pCrlContext=0x1cc55180) returned 1 [0176.411] CloseHandle (hObject=0x354) returned 1 [0176.411] CloseHandle (hObject=0x350) returned 1 [0176.411] CloseHandle (hObject=0x49c) returned 1 [0176.412] CloseHandle (hObject=0x340) returned 1 [0176.412] CloseHandle (hObject=0x494) returned 1 [0176.412] CertFreeCRLContext (pCrlContext=0x1cc55100) returned 1 [0176.412] CertFreeCRLContext (pCrlContext=0x1018ac0) returned 1 [0176.413] CloseHandle (hObject=0x45c) returned 1 Thread: id = 13 os_tid = 0x7f4 Thread: id = 14 os_tid = 0x40c Thread: id = 15 os_tid = 0xac8 Thread: id = 17 os_tid = 0xb44 Thread: id = 115 os_tid = 0x4b0 [0163.454] CoGetContextToken (in: pToken=0x1ba6fa00 | out: pToken=0x1ba6fa00) returned 0x0 [0163.455] CObjectContext::QueryInterface () returned 0x0 [0163.455] CObjectContext::GetCurrentThreadType () returned 0x0 [0163.455] Release () returned 0x0 Thread: id = 168 os_tid = 0xb54 [0169.487] SleepEx (dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0192.628] CoGetContextToken (in: pToken=0x1ba8f540 | out: pToken=0x1ba8f540) returned 0x0 [0192.628] CObjectContext::QueryInterface () returned 0x0 [0192.628] CObjectContext::GetCurrentThreadType () returned 0x0 [0192.628] Release () returned 0x0 Thread: id = 169 os_tid = 0x34c Thread: id = 170 os_tid = 0xb30 [0171.653] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.656] ResetEvent (hEvent=0x36c) returned 1 Thread: id = 171 os_tid = 0x9bc Thread: id = 175 os_tid = 0x83c Thread: id = 179 os_tid = 0x6cc Thread: id = 227 os_tid = 0x220 Process: id = "5" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x263ed000" os_pid = "0xa98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x7ac" cmd_line = "\"C:\\Windows\\explorer.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 16 os_tid = 0xa6c Thread: id = 18 os_tid = 0xab0 Thread: id = 19 os_tid = 0xa68 Thread: id = 20 os_tid = 0xaa8 Thread: id = 21 os_tid = 0xabc Thread: id = 22 os_tid = 0xab8 Thread: id = 23 os_tid = 0xa9c Thread: id = 24 os_tid = 0x344 Thread: id = 65 os_tid = 0xa88 Thread: id = 66 os_tid = 0x348 Thread: id = 67 os_tid = 0x314 Thread: id = 68 os_tid = 0xa78 Thread: id = 69 os_tid = 0xa7c Thread: id = 70 os_tid = 0x34c Thread: id = 71 os_tid = 0xa70 Thread: id = 72 os_tid = 0xb0 Thread: id = 73 os_tid = 0x78c Thread: id = 74 os_tid = 0xb54 Thread: id = 75 os_tid = 0x7dc Thread: id = 76 os_tid = 0xb50 Thread: id = 77 os_tid = 0xb30 Thread: id = 78 os_tid = 0xb4c Thread: id = 79 os_tid = 0xb58 Thread: id = 80 os_tid = 0xadc Thread: id = 81 os_tid = 0x318 Thread: id = 82 os_tid = 0x6c8 Thread: id = 83 os_tid = 0x6a4 Thread: id = 84 os_tid = 0x32c Thread: id = 92 os_tid = 0x5e0 Thread: id = 93 os_tid = 0x83c Thread: id = 94 os_tid = 0x8cc Thread: id = 109 os_tid = 0xa90 Thread: id = 110 os_tid = 0x458 Thread: id = 111 os_tid = 0x460 Thread: id = 112 os_tid = 0x49c Thread: id = 113 os_tid = 0x4a0 Thread: id = 114 os_tid = 0x4ac Thread: id = 116 os_tid = 0x4a4 Thread: id = 117 os_tid = 0x510 Thread: id = 140 os_tid = 0x530 Thread: id = 143 os_tid = 0x528 Thread: id = 151 os_tid = 0xae4 Thread: id = 176 os_tid = 0x7bc Thread: id = 177 os_tid = 0x5d8 Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x971d000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 25 os_tid = 0x790 Thread: id = 26 os_tid = 0x7c0 Thread: id = 27 os_tid = 0x20c Thread: id = 28 os_tid = 0x60c Thread: id = 29 os_tid = 0x320 Thread: id = 30 os_tid = 0x6cc Thread: id = 31 os_tid = 0x42c Thread: id = 32 os_tid = 0x1e4 Thread: id = 33 os_tid = 0x760 Thread: id = 34 os_tid = 0x75c Thread: id = 35 os_tid = 0x74c Thread: id = 36 os_tid = 0x710 Thread: id = 37 os_tid = 0x6d0 Thread: id = 38 os_tid = 0x6bc Thread: id = 39 os_tid = 0x6b8 Thread: id = 40 os_tid = 0x6b0 Thread: id = 41 os_tid = 0x6a8 Thread: id = 42 os_tid = 0x69c Thread: id = 43 os_tid = 0x698 Thread: id = 44 os_tid = 0x688 Thread: id = 45 os_tid = 0x684 Thread: id = 46 os_tid = 0x678 Thread: id = 47 os_tid = 0x4a8 Thread: id = 48 os_tid = 0x46c Thread: id = 49 os_tid = 0x44c Thread: id = 50 os_tid = 0x424 Thread: id = 51 os_tid = 0x420 Thread: id = 52 os_tid = 0x41c Thread: id = 53 os_tid = 0x404 Thread: id = 54 os_tid = 0x14c Thread: id = 55 os_tid = 0x158 Thread: id = 56 os_tid = 0x3fc Thread: id = 57 os_tid = 0x3f4 Thread: id = 58 os_tid = 0x3e8 Thread: id = 59 os_tid = 0x39c Thread: id = 60 os_tid = 0x390 Thread: id = 61 os_tid = 0x38c Thread: id = 62 os_tid = 0x388 Thread: id = 63 os_tid = 0x37c Thread: id = 64 os_tid = 0x374 Thread: id = 141 os_tid = 0x64c Thread: id = 142 os_tid = 0x52c Thread: id = 159 os_tid = 0x96c Thread: id = 160 os_tid = 0x97c Thread: id = 161 os_tid = 0x9ec Thread: id = 162 os_tid = 0xae8 Thread: id = 163 os_tid = 0xaf0 Thread: id = 164 os_tid = 0xad0 Thread: id = 165 os_tid = 0xaac Thread: id = 166 os_tid = 0xa7c Thread: id = 167 os_tid = 0x54c Thread: id = 172 os_tid = 0x5c4 Thread: id = 174 os_tid = 0x6c8 Thread: id = 178 os_tid = 0x69c Thread: id = 180 os_tid = 0x500 Thread: id = 181 os_tid = 0x56c Thread: id = 182 os_tid = 0x6b8 Thread: id = 183 os_tid = 0x758 Thread: id = 184 os_tid = 0x7b8 Thread: id = 185 os_tid = 0xa4c Thread: id = 186 os_tid = 0x388 Thread: id = 187 os_tid = 0x6a0 Thread: id = 188 os_tid = 0x760 Thread: id = 197 os_tid = 0x75c Thread: id = 204 os_tid = 0xafc Thread: id = 205 os_tid = 0xb14 Process: id = "7" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x23899000" os_pid = "0xb0c" os_integrity_level = "0x3000" os_privileges = "0x60900000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 85 os_tid = 0x5a8 Thread: id = 86 os_tid = 0xba8 Thread: id = 87 os_tid = 0xb20 Thread: id = 88 os_tid = 0x1c4 Thread: id = 89 os_tid = 0x670 Thread: id = 90 os_tid = 0x730 Thread: id = 91 os_tid = 0xb48 Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x972d000" os_pid = "0xc8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dde1" [0xc000000f], "LOCAL" [0x7] Thread: id = 95 os_tid = 0x7a0 Thread: id = 96 os_tid = 0x6ec Thread: id = 97 os_tid = 0x768 Thread: id = 98 os_tid = 0x764 Thread: id = 99 os_tid = 0x758 Thread: id = 100 os_tid = 0x724 Thread: id = 101 os_tid = 0x718 Thread: id = 102 os_tid = 0x714 Thread: id = 103 os_tid = 0x154 Thread: id = 104 os_tid = 0x150 Thread: id = 105 os_tid = 0x120 Thread: id = 106 os_tid = 0x118 Thread: id = 107 os_tid = 0xf0 Thread: id = 108 os_tid = 0x574 Thread: id = 173 os_tid = 0x9f0 Thread: id = 206 os_tid = 0xb00 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xad16000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bc99" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 118 os_tid = 0x330 Thread: id = 119 os_tid = 0x638 Thread: id = 120 os_tid = 0x554 Thread: id = 121 os_tid = 0x720 Thread: id = 122 os_tid = 0x668 Thread: id = 123 os_tid = 0x65c Thread: id = 124 os_tid = 0x144 Thread: id = 125 os_tid = 0x110 Thread: id = 126 os_tid = 0x3f0 Thread: id = 127 os_tid = 0x3ec Thread: id = 128 os_tid = 0x3e4 Thread: id = 129 os_tid = 0x3e0 Thread: id = 130 os_tid = 0x3d0 Thread: id = 131 os_tid = 0x3cc Thread: id = 132 os_tid = 0x398 Thread: id = 133 os_tid = 0x394 Thread: id = 134 os_tid = 0x384 Thread: id = 135 os_tid = 0x380 Thread: id = 136 os_tid = 0x368 Thread: id = 137 os_tid = 0x350 Thread: id = 138 os_tid = 0x33c Thread: id = 139 os_tid = 0x520 Process: id = "10" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x2139e000" os_pid = "0x4f0" os_integrity_level = "0x3000" os_privileges = "0x60900000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 144 os_tid = 0x56c Thread: id = 145 os_tid = 0x50c Thread: id = 146 os_tid = 0x550 Thread: id = 147 os_tid = 0x658 Thread: id = 148 os_tid = 0xaec Thread: id = 149 os_tid = 0x514 Thread: id = 150 os_tid = 0x464 Process: id = "11" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6c4a3000" os_pid = "0x4e4" os_integrity_level = "0x3000" os_privileges = "0x60900000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 152 os_tid = 0xaa0 Thread: id = 153 os_tid = 0x9e0 Thread: id = 154 os_tid = 0x94c Thread: id = 155 os_tid = 0xaa4 Thread: id = 156 os_tid = 0xad8 Thread: id = 157 os_tid = 0x570 Thread: id = 158 os_tid = 0x270 Process: id = "12" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x6ae9b000" os_pid = "0xba4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0007381d" [0xc000000f] Thread: id = 189 os_tid = 0xa10 Thread: id = 190 os_tid = 0x4f0 Thread: id = 191 os_tid = 0x74c Thread: id = 192 os_tid = 0x464 Thread: id = 193 os_tid = 0x658 Thread: id = 194 os_tid = 0x514 Thread: id = 195 os_tid = 0x550 Thread: id = 196 os_tid = 0x708 Process: id = "13" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x6afb3000" os_pid = "0xa58" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x370" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 198 os_tid = 0xa3c Thread: id = 199 os_tid = 0x52c Thread: id = 200 os_tid = 0x38c Thread: id = 201 os_tid = 0x538 Thread: id = 202 os_tid = 0x5b4 Thread: id = 203 os_tid = 0x614 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x24f0e000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b7a5" [0xc000000f], "LOCAL" [0x7] Thread: id = 207 os_tid = 0x690 Thread: id = 208 os_tid = 0x348 Thread: id = 209 os_tid = 0xad4 Thread: id = 210 os_tid = 0x674 Thread: id = 211 os_tid = 0x540 Thread: id = 212 os_tid = 0x3d4 Thread: id = 213 os_tid = 0x5f8 Thread: id = 214 os_tid = 0x5f0 Thread: id = 215 os_tid = 0x5ec Thread: id = 216 os_tid = 0x5d0 Thread: id = 217 os_tid = 0x12c Thread: id = 218 os_tid = 0x170 Thread: id = 219 os_tid = 0x3c0 Thread: id = 220 os_tid = 0x3b8 Thread: id = 221 os_tid = 0x3a8 Thread: id = 222 os_tid = 0x2fc Thread: id = 223 os_tid = 0x2f8 Thread: id = 224 os_tid = 0x2dc Thread: id = 225 os_tid = 0x2d4 Thread: id = 226 os_tid = 0x2cc